Also consider, that it wouldn't even be less secure than doing it in the end-user device, given that people can just hand an end-user device to another person, too.