I discuss the whole content of that video in this thread: https://bitcointalk.org/index.php?topic=5090244.msg48978949#msg48978949

It is in spanish, but if there is some interest I could translate it.

TLDR: All those potential attack vectors requiere physical access to the device among other things. And even if all requirements would be met (which is already enough negligence on the user part) there are also additional countermeasures for additional security (ie. passphrase).