Anyone in the supply chain with access to the Tapsigner can take a photo of the back of it. Someone with access to Nunchuk's server can get a copy of the encrypted backup.