Response nostr:npub132ertlsrunh600cph2au55ssmel2cqdt5mnrpxfand5ych4nmp8q50zmdh ?
While nostr:npub1az9xj85cmxv8e9j9y80lvqp97crsqdu2fpu3srwthd99qfu9qsgstam8y8 complains about Pi’s “unverifiable GPU code”, their own devices have the same equivalent, except you can’t even see the blob to compare with others
(you must trust the bootloader to provide you a hash, what could go wrong)
🤔 
Discussion
Unlike Raspbery Pi, we wrote the coldcard bootloader, it's fully verifiable. I recommend reading the code in addition to docs. https://github.com/coldcard/firmware
The entire problem is that the bootloader has to be trusted with attesting what it is.