My threat model takes into account people who act like experts but aren't.
BitBox Blog
Coldcard isolation bypass
Responsible disclosure of a Coldcard vulnerability that allows an attacker to spend your bitcoins when you think you are signing a testnet transact...
