you do not need login and password, Trezor replaces them. If an attacker doesnt have your device, he will not gain access to your credentials.
But I don't like that Trezor has a limited list of supported cryptocurrencies.
And the price is rather big.
. They have a comfortable design.