Definitely got me considering diversifying into another wallet. Ngrave and SafePal seem the top 2 airgapped choices. Though even then, theoretically, firmware updates become a weak link until the code is fully open-sourced. And even with Trezor’s, the physical device itself can be hacked.

Passphrases 100% of the time with all options.