GM! Spent last week making the Favilla KEY open its Bitcoin wallet only after a real power cut. Battery physically disconnected from MCUs and the secure element, not a software reboot. Anything running in memory is gone before the seed is ever unwrapped l and radios never come up in that made, so you know the code is in the state it shipped and the device is offline when it sign. This week is multisig. Iβd rather no single device, ours included, be the only thing that can spend. Dev units soon for those that want to try and break one.