Coldcard had way to many proponents and users to be considered cultist.
I keep asking people: if I told you 3 days ago that their would be a major vulnerability, which device would you guess it would be?
Almost nobody would say ColdCard. Most say Bitkey or SeedSigner or Ledger.