how likely is that the hacker succeed in put the words in the correct order and steal the funds?
Very, very, very unlikely. You could input all the words on a fully infected computer and as long as they're not in the correct order it would be impossible to guess the right one. Indeed that's how you restore a Trezor one. There are just too many combinations for it to be a realistic possibility.
As ever there'll be some slackness on their part that they won't be alluding to.