> a cosmic ray flipping the "do not upload" bit in memory, could all lead to the key being accidentally uploaded.

Nah, no shot.