if somehow the software could pull a switch address a nano-second after I confirm on my Trezors. I am just trying to think out of the box here. I have been using Trezors since early on with the T1 and several T's as well. I triple check the display and have never had any issues at all.
Not possible.
As soon as Trezo
or any other HWr sign transaction with eligible destination address there is no way for any software client
no matter if the latter is infiltrated or not to switch that address.