Can crypto users trust the supply chain behind hardware wallets?