Fair point but they have sort of figured that one out too as they send it to you direct and put it in a sealed bag with a code on it which matches the device. I am sure the spooks can tamper with it and could do a good job of obfuscating the fact they have done it to you specifically especially if you are on a list somewhere but how many coldcards do they send out a week? It's sort of getting into the realm of the improbable