A close friend had all his bitcoin on one of these effected cold cards. He is certain the only reason his account wasnt drained was because he added the 25th word passphrase.
He has moved everything off now, in case they start going after the passphrase too. He likened the last 2 days to the feeling of almost being hit by a train… inadvertently stepping out of the way but not because you saw the train coming.
Kinda surprised this isn’t being talked about more, most seem unaware.