Which "hack"? The fake trezor that was never plugged into trezor suite, which would have flashed warnings, or the "hack" that is mitigated by using a passphrase, which is what you're supposed to do anyway?