Seems kinda shitty to do, but does it make it insecure?
Kind of. The developers of Coldcard do not do not have the security experience required to properly maintain a secure codebase.
👀1