I get the paranoia. But we need to remain logical. Paranoid, but logical.
Dice-generated seed +
Stateless device to help with the checksum word +
Stateless device (new session) to sign tx airgapped
What could logically be an attack vector?
The device is physically incapable of communicating with the outside world.
Let me know where I'm wrong or not paranoid enough.
