Sort:  

I guess you still have to trust the trezor company, since the code is not open source anymore as far as I know...

What I worry about is it seems every storage method has vulnerabilities.