The specific thing I'm referencing / responding to is included in the writeup linked in the original post.
As for what you said, you're correct: there's no attempt to store any secrets in a SeedSigner so it's irrelevant that there's no secure element. The device is never connected to the internet (...