As I describe in my previous question I am trying to decide if it's worth it for me to use the Offline Private Key Protocol in creating some long term private archives, instead of just going with a simple symmetric encryption like AES-256. The answer to that question pointed out that using RSA to encrypt the symmetric encryption keys cannot make the solution any more secure. But since there are practical advantages I wanted to ask a further question:
When we say "RSA is broken" do we mean that a practical attack is discovered to retrieve the private key from the public, or do we mean that given a ciphertext and no knowledge of either the private or the public key the attacker can decrypt the data? I'm thinking that perhaps in my case the risk of the public key leaking from a trusted system that is doing the key-wrapped symmetric encryption is pretty small. And if by "broken" we mean the first alternative, and if we assume for a moment that the risk or the RSA public key leaks is zero (i.e. it's not public anymore) I am wondering if the more practical RSA+AES solution is for some reason actually less secure, rather than just equally secure, than the plain symmetric method.