Ancap - the graphene device substitutes your computer. The internet connected device must always also be secure. Not just the HWW.

The trezor is subject to supply chain attack. No matter what bag it comes in. All the centralized HWW's are. So, do multi vendor on your multi-sig.