Interesting... on 2022-12-13 the bounty has been claimed! Just a few hours after mprime1 shared the project in a comment on HackerNews, someone managed to drain the BTC.
https://github.com/mprimi/portable-secret/commit/3b22d2b42ba...
I'd love to hear more about this.