Another day and another hack, this time for Trezor model T hardware wallet, and it was done by Crypto Security Firm Unciphered.
First thing I will say is that it's very strange coincidence for this news to be released in same time when ledger messed up with their Recover disaster news, but whatever.
I am not surprised at all about this, we all know that Trezor devices don't have secure element and if it was possible to do this with Trezor One than it was going to happen to Trezor Model T as well.
Maybe this was sponsored by one French company, or Unciphered simply decided to use this opportunity for their own promotion.
Unciphered build a custom board, connected Trezor T to it and they had to wait a long time for extraction of PIN and mneomonic words, but they eventually did it.

This is nothing new for all devices without secure element, but there are few ways people can protect against attacks like this:
1.
Use multiple strong passphrases - this is easy and free solution available to anyone, and it makes hackers job much harder.
2.
Use Multisig setup with your Trezor wallet - this makes it impossible for anyone to extract keys with this procedure.
3.
Use Secret Shamir Sharing with passphrase - this should in theory work in similar way like Mutlisig setup.
4.
Don't keep any of your keys inside wallet if you don't use it daily, only import when you need to send transaction and then reset it.
5.
Use other open source hardware wallet with secure element.
Trezor is making their own secure element so new generation device will be much better, but knowing all this I was not recommending Trezor wallets for some time.
However, risk of this happening to regular people is very low, especially if you improve security like I mentioned.
Hacking Trezor T video process:
https://www.youtube.com/watch?v=50eiA-75NMY