Last night an email hit my inbox with the subject line "Critical Security Alert: STM32 Entropy Vulnerability." The sender read noreply@trezor.io, the real domain, and it sailed through every authentication check Gmail runs. According to the...