Or just set up 2fa and give the second factor to a third party whom the state has difficulty compelling. Granted this does require unconditional trust.