ColdCard has an indicator light that lets you know if the firmware running on it doesn't have a matching binary to an official release, but that's the only one I know of for sure. Moreover, that protects you from someone AFTER the manufacturer flashing malicious firmware to your device; it does not protect you from the manufacturer themselves.