It seems that the details were already posted all over the place over Twitter and Telegram, so here is an explanation of it:
In Coldcard, there are two implementations of getting bytes from the HWRNG...
If the parent seed was generated with dice rolls and has a paraphrase, would the bip85 children seeds generated on device be at risk?
1
