Even if hardware wallets in Canada are produced entirely from their own components and assembled there, does this guarantee that there are no malicious programs in the devices? Of course not. Any "Made in Any Country in the World" device can have a backdoor regardless of the place of production.
If you are worried that Coldcard says the device is "Made in Canada" but the components are from China, then this is just a marketing gimmick, nothing more. Such lies are found at every turn.
He's not arguing that making a device in some country makes it more secure than another; but it's a little bit dishonest. For example, if you say 'Designed in California, Made in China' like Apple, you just state the facts. But claiming it was 'made' in XY and then arguing semantics (
'technically, we made it here'), is a small sign of dishonesty. This, combined with other questionable statements and actions makes you wonder about the trustworthiness of the company and the source code.
I keep bringing up this company (while also criticizing what they're doing wrong), since they do a lot of good stuff:
It's only
assembled in the US, so it's the honest and right thing to do to write 'assembled' and not 'made'.