My threat model takes into account people who act like experts but aren't.

https://bitbox.swiss/blog/coldcard-isolation-bypass/