In a typical customer setup, Casa Inc. provides all the hardware wallets (we are an authorized reseller of both Trezor and Ledger). Casa App is downloaded directly from either the Apple iOS App Store or Google Play Store. If an insider attacker got a customer to install a malicious version of the app and provided the customer with malicious hardware devices, it would be possible for an insider to steal the user’s keys.