Building a Bitcoin-only hardware wallet

Hi everyone,
I’m Teddy from Teddy Solutions and Crystallwallet. I’ve been holding Bitcoin for years, and I’m working on Bitcoin setups and a Bitcoin-only hardware wallet called BitNeryvo.
I wanted to introduce myself and start a conversation about something that matters a lot to me: how much responsibility should a hardware wallet manufacturer take for the entire life of its product?
I’m concerned about compromised supply chains, modified devices, malicious firmware and fake companion apps. For someone new to Bitcoin, it can be difficult to tell whether a device has been tampered with or whether they’re installing the right software.
That’s why I think security needs to cover the whole process: component sourcing, manufacturing, delivery, initial setup and every future update. It also includes who inside the company can access devices, firmware and signing keys.
I don’t want to build a business where pressure to ship quickly takes priority over careful security work. I want our decisions to be explainable, our assumptions to be challenged and our protections to be tested. New security methods deserve investigation, but they also need evidence that they actually improve things.
These are the questions I’m working on with BitNeryvo. The project is still in development. My goal is to be clear about what has been tested, what remains uncertain and where independent review is needed.
More broadly, I want Bitcoin and self-custody to become easier for ordinary people to use confidently. If the business succeeds, I’d also like to help fund independent Bitcoin research and development.
When I say Bitcoin should be “20 years ahead,” I mean we should think seriously about long-term threats and build infrastructure that can serve people for decades. That takes time, resources and people willing to question each other’s ideas. I’d like to contribute to that work.
What would a new hardware wallet manufacturer need to demonstrate before we would consider trusting its product?
And where do you think the biggest gaps are today: supply-chain protection, updates, independent testing, recovery or usability for beginners?
Looking forward to hearing your thoughts, including the critical ones.
Teddy