I see where your head is at but I think you're wrong about this.

Trezor doesn't get it's due bc they supported shitcoin firmwares, but all they did was add SD card support.

I haven't seen a single person get pwned using the Trezor suite of products.

QR is a huge innovation and you know it, but I think you're taking this stance as you don't seem to care about the FOSS aspect - correct me if I'm wrong but that's my hunch.