Trezor T was hacked by Unciphered 4 months ago.
Source: https://youtu.be/50eiA-75NMY?feature=shared

ColdCard isn't FOSS and I don't like what happened there:

1. Coldcard was FOSS and bootstrapped - nvk and peter denied interested VC investors.
2. Foundation cloned code, announced slightly different hardware, raised money from those same VCs pre-product.
3. Coldcard changed software license to allow everything but that. No longer FOSS.

Source: https://twitter.com/ODELL/status/1651220101721358336


in FOSS, the "Free" here refers to the freedom to run, study, redistribute, and modify the software.