The Coldcard bug is clear developer negligence. They didn't write proper validation gates for their code. The hardware entropy path should have been written as a fail closed function. Instead of falli...