The Myth of Consumer-Grade Security
Why can't we have both security as well as court ordered access. What would be the problems if we had 5 HSM that are airgapped and located at secure facilities. Encrypted applications (such as WhatsApp, Apple Messenger, etc) are required to submit/transmit escrow keys that are encrypted with the public keys of those 5 HSM's. After a valid court order, a law enforcement official has to physically go to one of the secure locations with those encrypted escrow keys which will then be decrypted by the HSM. This way, everyone can have secure communication, but still allow legitimate law enforcement searches when ordered by a judge.