That wouldn´t help with a malware scenario.

A Hardware Security Module would avoid exfiltration of secrets.

(Off-line AND off-device)