Claude's suggestion is to add seedsigner to the signer. Architecture heterogeneity goes further than vendor heterogeneity, and it is difficult for any type of attack to simultaneously penetrate three keys. The security thinking of the three is completely different, there is no absolute who is safer, it depends on which type of attack is being prevented. The key to Raspberry Pi: it transfers risk to SeedQR The security model of SeedSigner is "stateless": nothing is stored in the device, and every time the signature is scanned and SeedQR is loaded with the private key, it is cleared upon shutdown. Benefits: The device is useless if it is stolen, dismantled, or replaced, and there is no private key inside; Without a wireless module, even if the system has a backdoor, it cannot transmit data Cost: SeedQR cards and steel plates are the private keys themselves, without PIN code protection. Whoever finds them will have this key. So the security of SeedSigner is actually equivalent to the security of your SeedQR The situation of ESP32 ESP32 is a universal microcontroller with wireless capabilities, and Jade is based on it. There have been public cases of its flash encryption being bypassed by hardware attacks, so Jade added an additional "blind oracle": PIN requires server cooperation for verification, and even if the flash is read, the private key cannot be obtained. The cost is what you saw before, unlocking servers that depend on Blockstream. The situation of security chips The security chip is specifically designed to resist physical attacks, with private keys stored in the chip and a limited number of PIN errors. The device is stolen, and the thief can hardly get the private key. The cost is that the chip itself is a black box and cannot be fully audited by the outside world. Additionally, please note that the old Trezor models (Model One, Model T) do not have security chips and are subject to public physical extraction attacks; The new Safe series has added a safety chip. Put it in your multi signature, it's actually an advantage OneKey Pro (security chip)+Trezor+SeedSigner (Raspberry Pi stateless), three completely different security architectures: Equipment stolen → Security chip device can withstand it, SeedSigner already has nothing in it Remote or wireless attack → SeedSigner physically impossible A certain chip has a backdoor, which only affects one key Three key points of using SeedSigner Try to buy Pi Zero v1.3 (without wireless) SeedQR and steel plates should be kept like cash and stored in the safest location The system image must be downloaded, verified, and flashed by oneself