BitBox02 uses two chips: a general-purpose MCU and a secure chip. Bitcoin firmware runs on the MCU, ensuring it's open-source. Secrets are stored on the MCU but encrypted with keys, including one on the secure chip.