About the software there are no perfect security system and all has its own vulnerabilities and in the future there will always be a new vulnerabilities that will be discovered and manufacturers will patch it, this is why if you own a hardware wallet, you should always update its software if new patch is released. Hardware wallets can not be hacked if it never been connected on a device that is connected on the internet but can be hacked if someone has physically access the hardware. Remember the man that lost all his savings because all of his cryptocurrencies store on a hardware wallet are gone or hacked? it is because he bought the hardware wallet from a re-seller that might had able to tampered the hardware that he sell and not bought directly from the manufacturer.