They didn't follow best practices.
You can't use a non open source device, and then 5 years later claim you used best practices.
We did a good job of explaining this, and spreading these facts.
Those Bitcoiners decided that was an acceptable tradeoff due to their trust in names.
