Why don't they make 2 step wallets
In order to transfer the coin to a different wallet, first it has to be transferred to an intermediary wallet you also own, only then can it "unlock" and be transferred to another wallet
i.e. the coldcards would have to transfer to a different wallet that the coldcard hacker wouldnt have access to
638 852 sat