I have hard time trusting HW manufacturers. Even trezor had recently email db hack, and now there are elaborate copies of the wallet with compromised hardware in the wild. Buying HW online is just asking to be targeted at some point. Unless you can go physically to the manufacturer and buy the thing with cash.