The second attack you mentioned is impossible. You cannot extract a seed phrase from a hardware wallet (unless it is a shit one).
In fact, you can if you come into possession of a device that has a security vulnerability which makes it possible. Such a vulnerability was found some time ago in Trezor, see here ->
Trezor&Keepkey - Unfixable Seed Extraction - A practical and reliable attack!, and you obviously forgot that you post in that thread.
Of course it would be best if this security flaw could be fixed (this is not possible), but it can be prevented by adding a passphrase or by using
SD card.