* Takes open source to the next level: The open source code can be viewed, verified and compiled directly from the device itself.
This is not correct. Coldcard is not open source, but rather, it is "source verifiable".
You can see their license here:
https://github.com/Coldcard/firmware/blob/master/COPYING-CC