I second this, too. A good hardware wallet with an own integrated display (mandatory in my opinion) protects your precious private keys from potential malware on your computer. But it's mandatory to check every detail and especially every output address of any transaction before you sign it with your hardware wallet.

Check amounts and output addresses thoroughly. You can check an address character for character, but it also suffices to check a handful at the beginning (excluding address prefixes 1, 3, bc1q or bc1p), in the middle and finally at the end of an address. I usually check around 6-8 consecutive characters in each of the three positions. It's ok to check less in the middle, but don't skip those!

The more careful you verify all details of a transaction before you sign and broadcast it, the less likely some malware can fool you and steal your coins.

If you're careless and lazy, malware can trick you even if you use a hardware wallet. Don't be a lazy fool.