minestr.app
· 64w
Any device or software with a recovery mode or password reset etc. by default has root access (i.e. full access) to your account/keys. The price you pay for convenience and outsourcing responsibility.
Any device or software that you use to create, store and/or secure your keys has full access to your keys.
Anyone's best bet against falling victim is to use open hardware and open software that can be audited and signed.
This would mean even the Coinkite hardware is untrustable.