last I checked Trezor is fully open source. The two issues with Trezor is they support shitcoins which opens up the devices attack surface and distracts the devs what they can focus on and secondly, on the devived you can get $15 worth of parts from radio shack to bypass the pin. I know the Trezor Safe 3 has a secure element but I'm unfamiliar with it