Trezor explicitly connected the passphrase expansion to security lessons from the July 2026 Coldcard seed generation vulnerability.