There's physical loss and data loss as well. Key storage devices are not perfect. You even have to account for HSM failures.

I believe the DNSSEC uses a 5 of 7 approach.