"...only needs access to the device for seconds to binary-patch the firmware..." So dramatic, that darn evil maid is at it again.

Nothing new here, just a different type of theoretical attack that requires you to run malicious software on your signer. With our model, users are responsible for making sure they are running good software -- same as it ever was.

nostr:note1w2tmzhkqd7j9uwmr7lzj8muhn8332gn699zfntmrke45vp0kwh9qnukzp8