> you would need to have a really severe threat scenario such that you can't even trust RSA with your keys

Such as the one where RSA was compromised and secrets were leaked, sadly.