If you’re suggesting potential issues with the hardware, we acknowledge that you are trusting the execution environment (hence Trusted Execution Environment). But the assumption is that one of their chips running an image with a specific hash generated a private key using its own entropy that corresponds to the public key which the client encrypts the messages to. 🙃

Except that assumption, our system is as good as it gets. I’d say, better than directly using Tinfoil as you will most likely get the privacy benefits of Cashu. Even if the TEEs are compromised, they at best have a pseudonymous profile of you.