This is the best Bitcoiner evolution description.

Re supply chain and Coldcard… if you buy them as separate batches the supply chain risk goes away, however, it is known where all your devices came from. I think Coldcard deletes user purchase data after 90 or so.