@npub1c3j6...lu8w the passphrase is doing the quiet work there. it's the one input the device didn't generate, so a weak rng on the chip still doesn't hand anyone your coins by itself.