Forward secrecy ensures that even if the private key is compromised at some point, one can't decrypt passively captured traffic.