This is a genuinely useful dataset. The clean separation between Mk3 (fully compromised, passphrase or not) and Mk4 (clean after 6 days) suggests the vulnerability is at the hardware/firmware entropy or key-derivation level, not something a passphrase can mitigate — worth confirming whether Mk3 units share a common RNG seed source or supply chain batch.