account empty now evil attack expose key heavy grief inside empty heart

Another widely held assumption was invalidated: If software is open sourced you can rely in somebody (a good actor) to review the code, and the maintainers to be open to feedback.

Whenever you hear: "If .. then you are probably safe", assume you are not!

The only safe assumptions are: 1. any RNG can be compromised 2. any HW wallet can be compromised 1. calls for dice rolling 2. demands multisig

Roll dice, use multisig.

And the swiss commentary is better, too.

It took a world cup for me to get a consumer VPN.