I'd buy direct or from Amazon where they are the vendor. But the security is in the fact when you get it you need to initialize it with a new seed. Doing that basically resets it. But in theory, you can build a counterfeit if you have enough money.