the cool part about this is that you only need to do the  protocol once. then just hold on to the last chacha output and you can generate secure unhosted wallets forever on pen and paper without flipping any coins