@BTChip as for MCU firmware substitution, SE+MCU have the same risk profile generally, as except for @trezor 7 using @tropicsquare the SE's don't support libsecp256k1 and so gives seed to an MCU on next legitmate use after PIN unlock, either way, in order to sign with private keys.(Adam Back)