Hardware wallet makers bear primary responsibility for supply chain security across third-party resellers