Problem that I myself have refused to see.
Although most hardware wallets are open source, there is no incentive for them to be reviewed by a third party.
There is a huge industry of podcasters who ...
one solution is visible review log. you note which parts of the code have been looked by whom, and you publish the result tog together with the code. this creates a gradient towards actually making software more secure over tume