You could either flash the firmware yourself or source the Nitrokey through a trusted channel (e.g. meet us).