I kinda see his point. Makes a person a target immediately. Like, if you wore a sign saying you control the keys to bazillions of dollars and walked down the streets of (insert horrible neighborhood) alone. You’d be kidnapped/mugged/tortured for account information in minutes.
If an institution posted the public keys on its website, though…that “might” be acceptable. Dunno.