I personally know two dudes that got their precious metal stolen this way. One guy beat to a pulp as well.

• Plausible deniability.
  Trezor has had this for a long time.
• Multisig.
  2 of 3 using Electrum, for example, has been relatively simple and available for over a half decade now. You can't divulge what you do not possess (the second key).

Now we have things like Coinkite's TapSigner, making multisig even easier.