What actually runs when you boot the stick, and what is deliberately not there.
When you power off, RAM loses its contents. We should be precise about that, because the word “destroyed” is used loosely in this industry:
We are not claiming to defend against an adversary who has physical possession of your machine within seconds of shutdown. We are claiming that your key never existed on a networked, persistent system — which is the threat that actually empties wallets.
The METALLIC edition is hardware write-protected: the stick physically cannot be modified after it leaves us, so the software you boot is the software we shipped. Nothing on your computer can alter it, because the write path is severed in hardware rather than in software.