Several wallets on one device

Every word on the picker before you enter a passphrase is unverified. Names, colours and networks come from a file beside each sealed blob, which anyone who has held the card could edit. A line that does not scroll away says the device cannot know a wallet's name until it opens it. If a wallet opens under a different name from the one you tapped, the device tells you.

No fingerprint is shown on the picker, since there it would be unverified.

After unlocking

A separate screen shows the fingerprint of what actually loaded, before the wallet. A mistyped BIP-39 passphrase produces a valid, different, empty wallet with no error anywhere, and this fingerprint is the only place it shows.