Yes that is all true - - but if you want total protection, key distribution is not the way to go. National security organizations (such as NSA here in the US), have back doors into encryption devices and programs.
There is nothing like the one-time-pad approach or a software program that emulates it. Ken