Most people don't check software signatures (and never will), so hardware wallets like Coldcard, Trezor, Ledger do it for them. Does this require trust? YES Is it better than the alternative? YES If your wallet doesn't also check firmware signatures for you, you are at risk!