Not sure. I understand. Swan is fine IMO, especially for this DCA use case & immediately moving out to a wallet. Very low risk.
Discussion
Swan requires kyc and your identification. Its also custodial. This is a non starter for most people who are serious about bitcoin.
But you're worried about phishing email masquerading as trezor emails?
Sounds like a half ass boycott or something lol