-snip-
I understand I cannot just scan online wallets without their permission. But let's stick to the security of HW wallets then.
How would I know how secure a HW wallet is? What points should I test to see it?
Not my area, but Id start with sniffing traffic. Wireshark works on USB connections as well. Might be interesting.