Coldcard bug in simple english. Code had a safety check to confirm the real randomness chip was in use. But the check only asked "does this setting exist?" But not "is it turned on?" It was off. So the wallet made keys from fake randomness, and fake randomness can be guessed.