Note: That kind of leak is extremely rare, so if that turns out to be the biggest weakness in this system then I think it has achieved my goal of showing that the only options are not completely secure and wide open.<p>If we are using the secret sharing variant, then it means that during the time between the leak and the time the device manufacturers push out an update to replace that key and re-encrypt the appropriate shares with the new key someone who seizes a phone and wants to decrypt it only needs the approval of one major police agency and two civil rights organizations instead of two major police agencies and two civil rights organizations.<p>If we are not using that variation, then it means that until a new key goes out in an update anyone who seizes your phone (and who has the leaked key) can decrypt it. One way to protect against this would be for the device to have a command that erases the saved encrypted symmetric keys. This command would require that you show it that you have a copy of the corresponding private key before it erases the encrypted keys.