It is.

The only real problem with coldcard, and I understand it, is an ideological one.

Their code is protected by government. You cannot use it to sell a product and make money with it. Not a fan of that but this is not a security problem.

Unless I'm mistaken, but I don't think so. Willing to accept to be proven wrong.