All hardware wallet manufacturers have lied to their customers that sensitive data can't leave the secure element.
Then stick to permanently airgapped hardware wallets such as Passport, and your data can't leave the device at all.
This is true until fake and/or back-door firmware will not modify the data immunity inside Passport device otherwise they have the option to leave this wallet despite it is airgapped device. I would not put all trust on a single manufacturer. In my view the best setup for your stash is a multisig wallet with at least two airgapped co-signers, say Passport and ColdCard MK4.