But the seed itself should still be fully random though? And generated on-device during initialisation. Derived keys are a thing of course, and I understand the benefit thereof.

But a manufacturer-installed seed that they have control over sounds like a very bad idea.