If the hardware and software components aren't all open source, that's not even the worst they can do

Check out https://bitkey.build/how-the-wallet-works/

Essentially from my understanding there are 3 keys and Block only “controls” 1 of them and you need 2/3 keys to actually move money