Key is stored in StrongBox (dedicated security chip). Highest security level, available on newer devices.