I understand that a virus or malware can't get private keys off a Trojan but are they able to attach themselves to the trezor if, for instance, the trezor downloads updates from an infected computer and then, when plugged into another computer, infect that computer?

Thanks a lot for helping with my paranoia