also a yubikey doesnt scream "crypto" if you use it in public for 2fa.
I don't know, how many yubikeys were sold in total compared with Trezors?
another advantage a yubikey has over a trezor -- no bad usb infection possible. which i believe (not entirely sure) a trezor is susceptible to.
BadUSB is unlikely, the user would have to be socially engineered to ignore bootloader warnings at every step and even after changing firmware to a malicious one. The warnings about unsigned firmware won't disappear because the bootloader is in a write-protected area. The attack would be easier to conduct if Satoshi Labs was compromised, and afaik multiple people have to sign the firmware.
yubikeys vs trezors? no hard data but id imagine yubikeys far outnumber trezors.. yubikeys can be for work, computer logins, banking, email login etc.
are we talking about the same badusb here? badusb infects the usb chip itself, not the regular firmware of the device. so no approving bad bootloader etc, it just happens without user intervention.. poof the usb controler chip in the trezor is now compromised.. it can make the usb chip into any HID device it wants. it can emulate a keyboard for instance, and send keystrokes. or make itself look like a mass storage device and send a file. all with the trezor otherwise acting fine and with genuine firmware. as its the usb chip thats infected, not the trezor attached to the usb chip.
https://www.wired.com/2014/10/code-published-for-unfixable-usb-attack/yubikeys dont have a usb controller chip afaik (according to yubikey anyway, its a custom deal as it doesnt need full usb functionality) so its immune.
perhaps my data is out of date?