Friendly PSA: Buying hardware signing devices (hardware wallets) from a 3rd party introduces risk.