uncleJim21 on Nostr: Right. That was in a thread I found where Trezor was responding directly to this ...

Right. That was in a thread I found where Trezor was responding directly to this article and the researcher (Joe Grand). This looks like a story recirculating from 2023. I think Trezor is saying they haven't seen funds stolen that way.

FWIW it looks like an old story recirculating. My key takeaways:
- Hardware should be bought directly from them
- Tamper evident tape should be on device
- Upon first initializiation a firmware update from Trezor should flash -> bootloader verifies it was signed by Trezor. This one seems like it's new after the 2023 issue

No measure by itself is exhaustive. But especially the last bullet point blunts this threat vector (replaced micro, exploited firmware) .