What I understand is that generating private is not bad or not secure and what you need to put in check or always make sure is secure is your passcode/password which mean you have to use a genuine and uncrackable.