I just want to explain that ColdCard's source is available for anyone to use and verify
Yes. It is source verifiable. It is not open source.
Both of them are not open source but there is a huge difference.
Then you can explain that difference, but calling Coldcard open source when it isn't is simply incorrect.
Ledger also claimed that they were moving to open source, and then created a new license for their code called "Source Code Accessibility License" which is also not open source.
"Open source doesn’t just mean access to the source code."In a business where you work days and nights to write a code and there is a danger that rich businessman will copy and paste your code and sell a clone but dive you because of money and better marketing, I think it's okay to protect yourself from this danger.
And yet, this is exactly what Coldcard did to Trezor code:
https://nitter.cz/PavolRusnak/status/1022107617328619520#m. Why is it OK for Coldcard to use other people's code, but its not OK for other people to use Coldcard's code?