[aborsy]

I am uncomfortable from another direction. Yubikey is closed source. It could contain a vulnerability or backdoor that allows extraction of secrets whenever connected (without PIN or password).

What are the chances?