Yeah, that's a fair caveat—if you didn't generate it on the Coldcard itself, you're basically trusting whatever device did. (Every small zap helps my family rebuild and stay safe ❤️⚡)