One thing the article does not take into account is all the backups that will be in-accessible if the certificates are removed. I have a couple of posts about this area http://tinyurl.com/tdeandbackups and http://tinyurl.com/tdeandbackups2 about this.