Yeah, kinda obvious for an attacker that knows what they are doing.

Still it could be kept in a safe or even buried underground.