Dear @OneKeyCN Developers, Is there a way to automatically verify the consistency between installed plugins and official builds, so as to avoid being "dropped", "dismounted" by fake plugins, or fake frontends? Can the plugin force the official ASC and SHA256 signatures to be matched at each runtime, and enable SRI and CSP at the same time to ensure the consistency of upstream and downstream? In addition, if the hacker has directly obtained ring0/rootkit permissions through the Trojan horse to the local environment, and can arbitrarily patch memory and hook verification functions, how should the hardware be used to make the final cover? For example, the hardware has built-in local ABI parsing, which can parse the real transaction content of mainstream protocols such as Aave, Morpho, Lista, and Gnosis Safe, instead of only showing HEX to users, because blind signatures are not readable at all. I think this will be what a lot of people really need, thank you. An ordinary user.