Coldcard Failure Highlights Open Source vs Source-Available in Bitcoin

The distinction matters less as licensing theory than as a security-resourcing question: if restrictive terms shrink the pool of independent reviewers, the vendor absorbs work that the Bitcoin trust model assumes is distributed. That shift is what the Coldcard episode exposes, and it affects every user who treats auditability as a substitute for institutional guarantees. Whether restrictive licensing spreads across wallet firmware, and whether vendors can fund the review capacity they take on, is the open question.