I never had a good feeling about the coldcard. To require even a modicum of trust in the supply chain the developer or the design is too much trust. Coinkite spent too much time with security theater and not enough time designing all trust out of the product.