Nothing is perfect. With the recent Ledger vulnerability the devs response and transparency was good. The security might not be perfect, but it will improve overtime.
As much as I hate McAfee, you can't argue with what he said: As long as there is technology in our daily lives, there will be hackers there, waiting on the sidelines, to break inside it. [Paraphrase]
As long as companies like Ledger and Trezor work quickly to patch any security vulnerabilities, we should be fine.