Beyond Cold Storage: Why Hardware Wallets Need Open Source and Clear Signing Hackread