Andrew C questioned why not just publish the key a few days after the alert instead. The reason for waiting, according to Lau, is that if someone was offline during the final alert, they may see a scam alert instead and miss the legitimate one.