Per Coinkite: “Mk3 on version 4.0.1 (March 2021) or any subsequent version that their funds may be at risk”, however some devs seem to think that also Mk2 is affected.

how much does key generation stuff change between firmwares?

I haven't seen any good info that gets that specific.