With easily available tools you can extract keys from a trezor one in minutes, this attack has been publicly demonstrated many times. https://m.youtube.com/watch?v=Y1OBIGslgGM

Reply to this note

Please Login to reply.

Discussion

You can do the same with Coldcard, it's just not published because of NDAs.

"I" can't, can you? If yes then how?

So use passphrases and/or upgrade to a safe 3 or 5.