> It's not like companies have a choice.

> If they have a key in their possession [...]

So they do have a choice.

People/users have an option to keep the key themselves. Most wouldn’t bother to manage encryption keys.