Lessons so far from the Coldcard shit show: Has to be fully open source. Has to be independently audited Has to have a team trying to break into them. Has to have belt and braces for the most critical parts of the code which cannot change once tested and proven to work. Experienced team