When I joined this market it was hardware wallets that everybody was talking good about and people did not even what to hear when  you talk about online wallets hence hardware wallets has always been what I knew and consider to be the best types of wallets. I have seen reason why hardware wallets are the best even though I have not used one before but it will be impossible for me to say they are now bad, types of wallet's because the things happening can also happen to other type of wallets.

Why hardware wallet is better is because of the features of the wallet and if you can afford one then buy it. Why I did not own one was because I could not afford it and then after using what I own. I fell in love with the wallet I was using and since it was a non custodial wallets and have not given me any issues, I did not think about changing it but still hardware wallets are still the best type of wallets.

Well, most people that do not understand coding will just agree that the open-source code is safe. Actually, even if it is safe and reviewed by other people who understand the code, the hackers still can make some ways to crack it. They always scan or look for weaknesses of the hardware wallet since the hardware wallet always has OTA updates; the chances of vulnerabilities are high until the hacker finds holes to exploit and steals funds.

There's no perfect security in the online world; everything is possible if your device is connected to the internet. Buying a hardware wallet with open-source isn't enough to say you are safe. All hardware wallets can still possibly be hacked, exploited, or brute-forced.

I think those who manufacture hardware wallets, I think, scan QR codes, which is way better, I guess, way safer. At least it can't reach the internet, but it only scans QR codes to sign a transaction and generates a signed QR code and scans it to another device to broadcast the transaction.
Bluetooth or infrared are also not safe to use because on the past they generated some viruses before.

So the airgap seems more secure, one via QR code, and the hardware wallet has a summary of the transaction once it scans the unsigned transaction via QR code.

The ledger still needs to connect via USB to sign a transaction. The problem is if the device is connected to the internet or usually used online, the hardware wallet can be infected. 
So air gap would be a better solution that I think to avoid internet.

Day by day it’s been becoming more risky to use a hardware wallet unless we can verify it was bought from the official website. Current Ledger hack push to think twice before using a hardware wallet. I can recall I bought my first Ledger Nano from the official Amazon Ledger store. Later bought from their official website the latest device, the Ledger X.

I have also bought Trezor from their official website. I will advise purchasing only open-source hardware wallets from the official website and creating your own seed. We can't even trust delivery companies nowadays; they might also tamper with the device or pre-generate the seed. Make sure the device is original and hadn't been tempered and that there's no pre-generated seed there.