I disagree. With the right firmware, the SC4-HSM can securely generate keys that cannot be compromised without decapping the chip.