While I’m not positive how Coldcard handles their backup, here you have a response from our CTO regarding the diffculty of breaking a 20 digit code.
Besides that, you can head over to our blogs area to read more on why we use encrypted backups.
Hope this helps!