Nice!

It’s still not possible to verify that that code is what’s running on your device. Better than nothing.

I have the same critique of all firmware-pre-loaded devices (ColdCard, Trezor, etc.). Self-built SeedSigner is better in this regard.