The RNG is the only known issue, AFAIK.
So yes. Using a ColdCard, especially eternally quarantined (offline, PSBT) with your OWN seed material, should be just fine.
Even better is to add a passphrase (25th word) or upgrade to multisig.
For example, using Sparrow or BlueWallet, you can make a 2-of-2 with your ColdCard and a software seed as signers. This is a simple mitigation that doesn’t require any new hardware.
