The tap signer doesn’t have a screen, so if the application / device that is asking for the tap signer to sign is compromised, you can not valid the transaction details on the hardware wallet. It will blindly sign any transaction given to it.