I usually go with a simpler route. The device calculates the sighash and signs that one. If the wallet tried to tamper with the tx, the signature is invalid and the tx is rejected by the network. Since it only happens when the wallet is malicious, I don’t have to be nice.
1 Like