Money laundering by hardware wallets just not stands.
First there are electronic ways of sending a wallet, so why bother with international mailing procedures?
Secondly, with wallet transfers, the original owner still has control over the key. Receiver still has to make a transaction to make sure he is the only one in control.
Regarding your second point, merely being able to make a transaction would not ensure the receiver that he has exclusive control over the wallet, so the best practice would be to create a new wallet (that has new keys, of course) and to transfer the value from the compromised wallet to the new wallet. Of course, you would not have to create a new wallet if you already have another wallet that you know that you are the exclusive owner of the private keys, but you still need to remove all value from that potentially compromised wallet because the sender may well still have an ability to access the private keys, too (best to assume so).