From my point of view the very least they should do is to publish a paper or alike on all the details of their recovery protocol. For now it looks like the extr

From my point of view the very least they should do is to publish a paper or alike on all the details of their recovery protocol. For now it looks like the extracted seed isn't even protected, just split (with Shamir?) into 3 parts and they themselves can join the parts. Regarding their secure enclave - I thought it has read-only firmware and the "apps" just interact with it when they need a signature. That seems to be a result of false advertising.