Turns out all that silly security and paperwork banks go through has a purpose! But at least every crypto customer knows the risks right?

Wait, Trezor is just selling off-the-shelf QFP chips and holding their customers accountable for their own supply chain? They can't pot the bare dies? They can't burn in a signature? Do they think everyone else is stupid?