It's been long enough, and I hear nvk is going around pretending humans couldn't find the Coldcard defect.
So public disclosure time. No clue if Coinkite fixed these after I told them privately. I'm not claiming these can all be weaponised, or that they're definitely all bugs.
“One day soon National Socialism will be the religion of all Germans. My Party is my church, and I believe I serve the Lord best if I do his will, and liberate my oppressed people from the fetters of slavery. That is my gospel.”