No, you're wrong about this. Trezor and Coldcard are very different things if you get down to the physical design.
Trezor getting pwned -- https://www.youtube.com/watch?v=dT9y-KQbqi4
QR is a hack. No hate, I use it everyday
I do care about the FOSS aspect, not my business though