coldcard's microsd should be LUKS encrypted. I've got too many json's floating around unprotected.