That is a fair point about double checking the send address on the computer screen. It was beat into me early in my bitcoin journey to never trust the computer screen though and instead to trust what the airgapped HWW screen shows instead. But your point is still fair, if my coldcard said it is sending to address 123 and my computer screen Sparrow says its sending to address 456, I should know there is an issue of some kind before sending. So a malicious send would have to involve both sparrow and coldcard being compromised (or a user not double checking the send address in both places)