I don't touch anything designed for crypto, for one. People have lost Bitcoin due to shitcoin vulnerabilities. Not being able to provide entropy is not great but two internal sources is at least better than one. NFC is terrifying and is probably my least favorite 'feature' the coldcard has, so another strike.

They try to address backup security, but personally I don't think that's a tech issue to solve. Either OTP encrypt stamped seed words, use a passphrase, or both if you're worried about seed backup compromise.