If anything after the entropy fuckup, they were /are lot of eyes on the coldcard code and other wallets . Coldcards force user entropy now (latest firmware) so I think they are now ok to use , even to generate the seed, hopefully they go fully open source not just src code available. So don't throw the device just yet https://fountain.fm/episode/RZ5nt9RBqnyOL13HAZip