It is indeed. You can run the SHA256-based code on two different devices and thereby verify that both yielded the same seeds from the same dice rolls.
If the devices are from the same manufacturer, then you’ve eliminated the possibility of only one of them being vulnerable. But you haven’t eliminated the possibility of vendor-level vulnerability.
So you need to run the same dice-to-seed code on two independent vendors’ hardware, without mixing in RNG data, to verify that yes, those rolls yield those words.
If one of your devices is ColdCard, what’s your other device? It needs to use the same algorithm for dice-to-seed as your ColdCard (though not necessarily the same exact implementation).
