A March 17, 2021 firmware migration error caused Coinkite Coldcard devices to run seed generation on a software generator instead of hardware, producing weak recovery phrases

From the articleTrezor Raises Wallet Passphrase Limit to 128 CharactersAlso in Trezor Now Accepts 128-Character Passphrases, Pointing to Coldcard's Seed Flaw - Unchained