I’m surprised that the signing key lives on a non-airgapped system. A sophisticated attacker won’t be leaving any traces.