I would prefer Trezor over Ledger. Trezor is open-source and ledger is close-soruce.
Ledger Live is open source. All Ledger Nano wallet secure elements are close source which is one if the reasons to prefer Trezor. I will also prefer but use passphrase with Trezor. Ledger company also do not care if users privacy.
What if the developer install malware on their new update.(lets say they make new update on 15 JAN)
Being open sources software wont allow other users to see if its infected i believe.
The website can be compromise by hackers and malware update can be released. But always verify the PGP signature of the wallet before downloading or updating the wallet.
As for the developers, the vulnerability can be noticed and corrected, instead of close source wallet that you can no one can check the code.