Sure, but then it isn't related to the CA system anymore and any action from them wouldn't be under the radar anymore.

Also this problem would apply to any key like gpg. Well, as long as it's not in a Hardware security module. Of course they could also seize that but at some point it becomes logistically impractical, at least for mass surveillance.