Stupid question: How is it then more secure than the private keys on my device? If someone can send arbitrary things to it to sign if he compromises my device? Is it simply the fact that I can then unplug/change it an my private keys were never directly compromised?