Swan requires kyc and your identification. Its also custodial. This is a non starter for most people who are serious about bitcoin.
But you're worried about phishing email masquerading as trezor emails?
Sounds like a half ass boycott or something lol