It would have been better if you asked these questions before ordering your OneKey, but it doesn't matter now.

The positive thing is that both wallets are open-source. I also remember that the OneKey is one of those wallets that is based on Trezor's codebase with an added secure element. However, WalletScrutiny couldn't match the binary with the published source code. Compared to that, they managed to do it with the BitBox02.