Well the last statement is tautologically true, but yeah. Key Escrow is also impossible to enforce in user space (JavaScript), so unless you only allow signed everything, there will always be workarounds.