And unlike other certificates, in this case Comodo has a copy of your
private key (since they're writing it onto the device that they mail
to you.)

With a regular certificate, the private key stays on your computer and
never gets sent to them.

jf