It doesn’t hold your seeds other than in memory to sign and then it’s wiped from memory, verifiably
I'm sure before this incident coldcard was "verifiable" too. I'm just not convinced that Cold Card was as villainous as people are screeching about. I think we will probably see other exploits of services that we all thought were bombproof.
2