Having the same seed on two devices wasn't what I had in mind. In that case it's better to use MuSig2 (regular multisig has the same problem, though both devices would need to be compromised).
Why would adding computer randomness at seed generation time help with exfill at signing time?
If there an RFC / BIP for anti-exfill at signing time?