Yep, it's a tradeoff. Similar to what if a user loses their Signal app's backup passphrase and their phone dies