I think the thing that I picked up on was the new firmware attack. You need to secure your seedsigner to make sure a bad actor doesn’t puts compromised firmware on that could steel your keys. So don’t share your SS with other people thinks it’s safe cos you wipe your seed ever time I use it.

I'd remove the SD with firmware if I was to loan it to someone. I don't store the SD anywhere near the device anyway. It is also very simple to verify the software or reflash the SD.