What's even the point of a hardware device if there's no trusted display? Does it offer any security over a software wallet on a device that has a secure enclave like a phone?

If the software side is compromised it'll just show you the address you intend to send to and request the device to sign the malicious transaction