But I don't understand why do you need to attack every Bitcoin related company?
Can't you see that I am NOT attacking the company, but trying to help it and its clients?
Can you tell us how would you improve it?
I gave some suggestions (keep it as simple as possible, make the firmware read-only, make the case a bit harder to fake/tamper, ...)
But some risks are probably not fixable, such as the need to trust the manufacturer, hijacking in the mail, social engineering and address substitution ...
Clients must be warned of those risks, and the warranty must be carefully worded so that the company is not held liable for losses that come from them.