With Electrum Software I can verify the developers signatures before signing a transactions.  I can't do this with Trezor, I have to hope the Trezor firmware is not compromised.  How is this achieved?