It requires careful budgeting for future purchases (as the coin-join takes time).

Trezor now has experimental support for directly coin-joining bitcoin that is stored on the cold-wallet, but I don't think anyone should trust it.

Why don’t we just admit these tools are just fundamentally broken?

- gift cards involves getting in a car and driving to a place to buy them, which introduces annoying logistical issues

- the purchases made on a single card are linked together, so you have to keep track of cards you use for x store and what cards you use for y product (this is also true with bitcoin though, which is why I prefer other more privacy-focused cryptocurrencies)

- with gift cards there is a very high chance that your funds will be rejected or flagged as suspicious. which also limits the amount you can spend to around 100-200 dollers, since any more risks having all the money you put into that card flushed down toilet

I do personally keep a couple of gift cards on hand for the rare occasion I find myself needing to pay for something online and there is no alternative vender that accepts cryptocurrency (usually event tickets or membership subscriptions), but its a pain and I much prefer paying for things with cryptocurrency.

Cryptocurrency is an unregulated and environmentally disastrous ecosystem rife with monopolistic vender lock in, fraud and abuse, and little to no accountability or legal recourse for end users. But that's also true with the credit card / debit card / other electronic payment ecosystem.

At least with cryptocurrency I get a modicum of privacy.

It's easier than merely logging into my bank. Or paypal (which unintentionally locked me out for over a year after a broken tos update that I couldn't accept).

People have had hot and cold wallets forever, they just call them wallets and banks. It is the same workflow, except without:

Driving, operating hours, showing ID (oops my (hot) wallet got stolen/left at home. Now I can't withdraw from my bank until that's sorted.), the horrible password requirements, barely usable websites, and spyware apps that may or may not work on rooted/libre operating systems.

It's the legacy banking system that is fundamentally broken.

I can't think of one time funds from my checking account were wiped out because of a browser extension.

How many employees does trust wallet have? How funded are they? I am completely unsurprised that this happened to web3 trash. This is more of an indictment of the vc funded 'move fast and break things' attitude that pervades this site and 'web3' than it is of the greater cryptocurrency community.

Whatever security goals they claim to pursue exist only in their marketing copy.

The data leaks don't affect that, though they're still a serious problem since they exposed customers to different sorts of attacks.

Of course they should be doing both, but there's an easy, pragmatic workaround until then: You can just buy their devices on Amazon. (This does somewhat increase the chance of supply chain attacks, but that's always present, and I believe Ledger devices support hardware attestation in addition to tamper protection.)

For being offline wallets, their products sure do come with many connectivity options and live/online service integrations.