Yeah it's frustrating. The stm32l ROM code is a black box, as is the atecc608 microcode. Even riscv CPUs have closed source IP in the analog domain especially.
This industry is torturing it's users with a complexity that's not needed. I'm sure more bitcoin has been lost in HWW from bad UX than stolen from some security failure.
We've lost the forrest from the trees.
But hey, sponsorship of podcasts, conferences, and YouTube videos doesn't come cheap. You gotta push that merch!