The Coldcard hack, plus recent Trezor and SafePal attacks, raises big questions about crypto self-custody. Here's what they teach us.