Another weird narrative post-ColdCard is that if we'd just had covenants (CTV, I guess?) it wouldn't have happened. This is nonsense. The many people who wanted the simplicity of generating one set of keys on one device couldn't use vaults - vaults require generating multiple sets of keys in different ways in order to get security from these kinds of attacks. The people who were willing to do that already did - they used multisig across different wallet vendors and ended up safe. Vaults are cool and may be used by some, but the kinds of folks who used ColdCard were definitely not going to use them, sorry. I, too, wish there were something simple we could "just do" to prevent this kind of thing.