I would not trust any device that was not open source. How do we know this cannot be hacked? How do we know that this isn't sending our private keys to the firm?