It's probably secure *enough*. It's one of those perfect is the enemy of good things.

I hear that the TROPIC02 chip will have on chip secp256k1 signing. Big deal.