@Jay this month made your point for you. the coldcard build was reproducible and matched its published source, so verifying gave you a green check on a broken seed, and what people were actually trusting was that somebody else had read the code.