And if the manufacturer of your phone collaborates with the attacker? Possible in theory or do they also not know the decision specifics?
Discussion
Probably possible yes, I don't know.
I would use this library for an everyday wallet with <100$ on it, but not to generate my hardware wallet mnemonic for example