This is criminal when you realize current Cold Card mess: 2020 "Heck I don't trust even the way we make". 2020 tweet.

Watching old tweets from Cold Card CEO, now you realize how the red flag was out there regarding "entropy".

How on earth you make optional a critical step in a product that you admit to not trust even yourself.

If you yourself admit to not trust what your product does on something as critical, why you did not make the dice roll an enforced not optional step?.

Just have paranoid mindset from now on. Don't trust devs, ceos and tools on the surface that represent 3rd party tools regarding bitcoin that can be exploited. This goes too for any other hardware wallet and software wallet. In upcoming hacks anyone can "conveniently" blame AI and a "bad actor" that never gets caught....

Dedicate 2 or 3 weeks to learn the basics of bitcoin, how to verify GPG signatures, Tails OS, master how to securely use an airgapped wallet software or bitcoin core, and how quickly you can withdraw your funds to a backup exchange in case of an incident...If an incident is reported at night: do you have access to your wallet to withdraw at that exact time? Will you be able to react fast?

Because if now a hardware wallet is prone to exploit, you better also just learn to airgap and use a software wallet, they are also vulnerable to bugs? Yes, but hardware + software makes 2 components prone to error.

"attack surface grows with complexity, so decrease complexity by minimizing number of components, using simpler components."

But the important thing is: from now on, if CEO admits to not even fucking trusting what he makes, probably you shouldn't either.