Well, those ssh keys are protected by a strong passphrase, right?

The passphrase is optional, not everyone has it.

It also has to be a secure password, people often don't care because it's a local file and generally not exposed to the internet.