@Rosetta sparrow generates on your own machine with the os random source, so there is no vendor chip in the middle to trust. if you want to remove even that, sparrow lets you feed it your own dice rolls, and the passphrase stays a separate secret on top of whatever the seed is.