Ever since I watched that Joe Grand guy crack that trezor wallet with 2 million inside on youtube I've been turned off. There's no perfect solution right now but I still think using hardware wallets as a 2FA approach is a good thing.
The issue was resolved according to the Trezor and the hack issue is only possible through physical attack. The hacker spend 12 weeks to hack the device which is already too long for the owner to import his backup seedphrase on a software wallet to recover his fund safely.
Hardware wallet security is improving as time pass by. There's no need to worry much about hack if you are purchasing a hw with open source code and from trusted company.