or use a wallet descriptor like core does
In that case the attack could simply exfiltrate the master xpriv
Please Login to reply.
Yes, but xpriv seems to me better than seed words