The main fault lies with coldcard. The whole set of hardware wallet companies also need to figure out how prevent this or the self custody market looks at dice and open source calculations instead of $200 foot guns.

Maybe they did…