<oembed><type>rich</type><version>1.0</version><title>salvatoshi wrote</title><author_name>salvatoshi (npub157…e60gr)</author_name><author_url>https://yabu.me/npub157y6gz0l0rfhw220rfwnujeff6q2mec33nzkwz23umkrt6482exq8e60gr</author_url><provider_name>njump</provider_name><provider_url>https://yabu.me</provider_url><html>I&#39;m gonna shill this blog post I wrote some time back: https://www.ledger.com/blog/towards-a-trustless-bitcoin-wallet-with-miniscript&#xA;&#xA;If you don&#39;t trust a signing device, it&#39;s really hard to meaningfully use it without additional devices - I don&#39;t think creative paths can help much. For example, a device could lie about the xpubs you ask.</html></oembed>