Please make the Trezor firmware update, I can't say more for now since a responsible disclosure agreement has been made with Trezor team for this first report.
What I can already say:
Hardware wallets are great ideas... but without any secure elements like smart cards and real secure architecture and coding... broken hardware wallets may just bring the illusion of security... and that's the worse situation you can think about.
Like in other security industries (banking, authentication, signature...), users will probably have to learn this the hard way but...
Nothing new: Secure Elements and secure architectures already exist for good reasons