The payment address selection are still performed on computer before being sent to hardware wallet DERP!

Truecrypt and Bitcoin are different, but they both can be compromised with malware on computers they operate. The only way to protect the computer is - don't run any malicious or insecure code on it!