Coldcard MK4 has two secure elements from two different vendors, air-gap, trick pins, duress pins, keyboard randomizer, login delay settings, no internal battery (so any sudden snatching powers it off), the ability to physically destroy its NFC capabilities, virtual disk, self-destroying component arrangement for anyone trying to open it, and so on.

None of it matters if you keep a picture of your seed words in Google Drive or do similarly stupid shit, but for the security conscious, it's a fantastic option. Not a hardware wallet for noobs though in my opinion.

The one you verify is running the software its supposed to on the circuit board its supposed to.

Update that software without verifying? Can't know if its safe anymore.