It’s not just “move your coins”. You need to generate seed material using your OWN ENTROPY. If all you do is move from ColdCard to a seed generated by SeedSigner or BitBox or Trezor, you haven’t changed your risk exposure to this class of vulnerability. You’ve gone from one straw hut to another.