The lesson isn't "self-custody is dead." It's that a hardware wallet is a trust decision too — you're trusting the firmware vendor, not just the math. This is why seed generation needs to be verifiable and why one audit isn't a lifetime warranty. Move your coins if you're on an affected device. Then think about whether you're actually testing what you're trusting.