in the interests of saying something useful instead of idle musing:
We're all fretting about sourcing entropy for our master secrets (seed phrases if you prefer), but what about for the nonces we use...
This is a disaster waiting to happen. Those in what I call "the cult" not only collect xpubs but also send derived private keys to untrusted servers also maintained by them. That will be the Coldcard incident, it is just a matter of time.
1❤️1