I'll read that later, but even if I personally had your drive. Unless I had whatever pass phrase is set up. I couldnt do anything with it. Unless I missed something, I would need your drive and the wallet / system its tied to, to steal your funds. But just the drive itself, last I knew, wasnt even close to enough.
Let’s take a hypothetical situation of someone coming into the physical possession of your hardware wallet, and that this wallet has some kind of vulnerability that can be exploited with the help of cheap equipment and little technical knowledge. This currently exists with Trezor models which are extremely vulnerable in case the user has not set up passphrase, the seed can be extracted within minutes. The conclusion is that all those who are not aware of this vulnerability and do nothing to insure themselves, have at least one additional risk when it comes to protecting their assets.
For now, Ledger is definitely at an advantage because there is no such vulnerability - if there was one, Trezor would surely make it public. But what some people don't like about Ledger is the fact that it's not open source, for which Ledger again gives somewhat logical reasons.
Every device has its weak points, it's only a matter of time before someone discovers them. What plays the biggest role in the case of hardware wallets are possible remote attacks, which have not been recorded so far (or at least no one has made it public).
Broke down, bit the bullet and bought the Trezor Model T using some of the LTC I have.
Congratulations on your purchase, although it didn't seem to me that you would choose the most expensive option at the moment. Just a week ago you could get Nano S for some 30+ EUR, and Trezor T is 180 EUR now (VAT included).
So it showed up yesterday, didn't know until today. Got into a weird loop on the setup when naming the Trezor. But I figured that out. That said, it asked me if I wanted to set a pin, which I did, options seemed to be 1 to 9 numbers. Anyway, maybe this is what you meant by pass phrase, I don't know. But if not, what am I missing here ?
Edit: NM, figured it out. Just did a wipe of the device, then going to restore seed to double check if the pass wallet address is the same as well as the normal one. Pass phrase isn't even secure, but its for a test so... not like I can't do a new one that from what little I know is always attached to the seed.