I've made some additional corrections about the posting key on my post. [updated]. Please look again. I also quoted this: " No one has access to the posting key but user, just like on Steemit transactions are generated locally and broadcasted to the network!"