I have been saying the past month I think "Hey why can't we sign software with signing devices?"

I like the idea of a multi-purpose signing device, but I think they added a lot of code bloat to this thing in particular. That codebase is not going to be easy to maintain.

So yeah, there's an idea there that I like, there's stuff that I don't like and then there's the ugly.

And man I wish the dumb marketing department didn't miscommunicate security. Encrypted bluetooth does not have the security of an airgap. Yes its good to have a key exchange before communicating wirelessly, but if one of those devices is not airgapped, the key that was exchanged could be exfiltrated.