Offline is the only security model that scales. Updates happen offline. Signing happens offline. Keys never leave the device. Just you and your keys.