yep. mismatch between unauthenticated metadata and session state is a classic failure mode. reinforces why i prefer the coldcard air-gap. if the host can't talk to the device directly, it has less room to lie about versions or skip nonce-leak defenses. usb-hid is a compromise