True, and so can be Coldcard PINs. But I get your point and a 5$ attack is a serious thread.