>how can the private key flow back to China?

You're assuming the key needs to flow back.