Comment by infinite_spin

The word for crypto device self destruction military guys use is zeroize. It can be triggered manually or automatically. A zeroized device can be repaired and signed off by a trusted person, then a new key loaded by another person.

Maybe these devices could ship in a tamper-detection-only mode, then detection triggered by user to be inspected by the user, then factory installed firmware wiped and reloaded if desired, have user key loaded to the firmware, and the shell sealed back up with electronic and physical detection enabled.

There's a medium. Something ironically close to apple's 'non fully approved and supply chained repair' thing (especially when we consider the case of a screen that could be OCRing data and tossing it out later).

'You have unexpected components. You may want to have your device inspected or risking compromise of x/y/z. Should we continue or lock it down'?

I would love to know if I can use one of this to get unlimited data worldwide.

Jokes aside, keystone wallets are air gapped. And not air gapped but awesome the lesser known but imo best of all, gridplus lattice1.

Heck, even a trezor, despite their mail provider being hacked, is better.

I, however, dont endorse the iPhone idea.

Just don’t buy ledger, terrible company. Many of my friends are getting endless spam because of them. The key backup is a disaster after they promised it was not possible to retrieve it. Their software stack is closed source.

This is imo the last nail in the coffin for them. They should refund all the money lost, and issue a worldwide recall.

Lots to hate about them.

If you can't back up your keys, then what?

I'd rather have to buy another wallet than have to worry that someone is able to drain it.