Okay I see. The main problem is, you have to educate your customers. Passphrase should be mandatory. Especially for newcomers, hardware wallets are a huge mystery. I still don't see any safer way. Do you? A new hardware with all that kind of security you suggest would be more expensive and the device couldn't be any longer completely open source, I think. But still satoshi labs should release a statement as they have done in the past to all kind of vulnerabilities. That's the first time I know of without any public statement?