The BitBox02 spreads its security mechanisms redundantly and as wide as possible. For instance, it uses a dual-chip architecture, spreading the secrets needed to decrypt the seed across both the MCU and the secure chip. Breaching one isn't enough; both chips and the device password are required.