Title: Coldcard's $89M+ entropy bug is a good reminder that "hardware wallet" isn't a security guarantee by itself