Isn't the accepted risk of losing all the digital keys equal to the risk of someone booting up the root CA and walking away with it? I can see that happening in a junta situation.

https://www.iana.org/dnssec/ceremonies