MADEX on Nostr: ok I learned: “Unlike fully open-source wallets, Coldcard users cannot recompile or ...

ok I learned:

“Unlike fully open-source wallets, Coldcard users cannot recompile or modify the firmware independently”

quoting
nevent1q…zg92

it’s a massive failure on the communities part that this code was never checked by apparently anyone?

is it seriously true that nobody, not even cold card competitors audited the code ?