Do you really think none of the Coinkite devs knew? Their products have been generating vulnerable seeds for six years, yet they focus on physical security gimmicks while the seed itself is at risk remotely...