Exactly.

With trezor T you also fix the vulnerability with secure sd, you use a sd card to encrypt the seed, without the sd you can't extract anything and you can also add the passphrase.