The sad reality is that for off the shelf options, it was the best. If you followed the best practice of rolling dice. Their messaging around this was problematic, but the paranoid guide specifically says the TRNG method involves the most trust. The rest of the market is full of shit that requires their software, isn't airgapped, supports shitcoins, phones home, or some combination of the above. Simply avoiding all of that made Coldcard the obvious choice -- but that doesn't mean trust them more than you had to (or that it was a good choice -- just better). The real best option is and always has been airgapped DIY options. Glacier protocol if you wanna really do it up, or krux/seedsigner as more realistically in reach options. Or an airgapped laptop (but maybe flash clean BIOS to be sure you don't have malware right on the motherboard). And for the love of God roll the damn dice.