They're both air gapped. Trezor's not. But I would still skip coldcard (due to closed secure element) and go for DIY Seedsigner instead.

Anyway, don't rush, if you're using Trezor with a passphrase, you're miles ahead of ledger.