The #Mossad pager operation, the #Ledger implant hack, and the #NSA TAO tradecraft (documented in the ANT catalog) all follow the same core pattern.
Rather than attacking a hardened target directly, ...
The practical counter is a 2-of-3 multisig spread across different hardware vendors, because a compromised device then yields only one key and the attacker still cannot move anything, so one poisoned supply chain gets them precisely nothing. Adding a passphrase on top means no single device ever holds full access to the funds.