I put too much faith in the stories and the mystique around Coinkite and NVK for being paranoid and dedicated leaders in Bitcoin security. But in doing so I turned a blind eye to all of his arrogance against his competitors and all of his contempt for people who tried to build on his work. That kind of character bleeds into your work, so I'm not altogether surprised that this coldcard exploit happened.