I don’t know who needs to hear this but if your hardware wallet is closed source like for example Ledger, you have to except it’s compromised.(Bitcoin for Freedom)