You would also advise to use multisig and avoid Single sig?  

 For most people is overkill 

 Doesn't coldcard verify you have the correct firmware? 

 Yes https://primal.net/e/note1kvrjgssdruf3yran9jmr7tcrf4vwyz7a9wmsk0udek96qzkev3gslzgvnt 

 Also curious NVK, would you recommend moving from single sig + passphrase to multisig…or wait for some better FROST implementation before sweeping to a new setup. 

 I think multisig is great, but has many trade offs. So for most is overkill. Frost would be a different set of trade offs, it has very good potential.