If you think trusted third parties are security holes, corporate hardware wallets also have to fall into that category.

IMHO, it's just tradeoffs all the way down.