Coinkite fucked up the RNG, but the signing is working fine.
To use bitbox you have to plug it in a computer that could be full of Trojans and malwares.
Pick your poison.
If only the security issues you consider valid are taken into account, then yeah, only wallets you want to be will be secure. The thing is: there is no "fair" security failure. Any failure can take away your coins.
A cable connected wallet that properly blocks unauthorised data transmission should work as fine as an air-gapped one, as we would only change the medium of transmission. Your PC would only see an unsigned transacion then a signed one. Keys would not leave your hw wallet.
A cable connected wallet that properly blocks unauthorised data transmission should work as fine as an air-gapped one, as we would only change the medium of transmission. Your PC would only see an unsigned transacion then a signed one. Keys would not leave your hw wallet.
1
