Why an Update Can't Fix Trezor and KeepKey Vulnerability (And What ...