Check a Trezor Suite installer with GPG before you run it: the v26.9.2 filenames, the SatoshiLabs key fingerprint, and what a good signature cannot catch.
Yes, if it was strong and never leaked with the seed. The BIP-39 mechanism, which theft scenarios a Trezor passphrase survives, and the ones it does not.
One wallet is winding down its custodial product and calling the replacement self-custodial. The other hands you twelve words and no second chance. What each one asks you to trust, in the vendors' own documents.
Thousands of hardware wallet buyers had names, home addresses, phone numbers and emails taken in separate breaches at shipping partners, per TechCrunch. No key was touched, and the threat model changed anyway.
Hardware custody is a set of trade-offs, not a magic box. What a Ledger actually protects you from, what it cannot, and the trust-the-vendor question the marketing does not dwell on.