If you give them the coldcard along with a link to the tutorial by nostr:npub1rxysxnjkhrmqd3ey73dp9n5y5yvyzcs64acc9g0k2epcpwwyya4spvhnp8 and nostr:npub1ahxjq4v0zlvexf7cg8j9stumqp3nrtzqzzqxa7szpmcdgqrcumdq0h5ech then they should have no trouble. But technically they shouldn’t use a pre-owned HWW 😉
BitBox (Bitcoin only version) is very user-friendly and certainly no more complex than Ledger. But frankly the coldcard is no more difficult, it just has the option of using advanced features that other HWWs lack. But the basic setup process with coldcard is effectively as easy as any other brand.
To your question, my understanding is that their funds aren’t imminently at risk, but depending on the size of their stacks, they may want to keep their risk tolerance level at zero.
In any case, the sooner the better