Sadly it was expected that these implants would be found in other hardware wallets besides Ledger, especially those connected to CryptoBilis that sold many different brands. I seriously doubt that someone only modified one Trezor and stopped there. I am afraid this is just the beginning of many more to come.
I don't get it, why is this from only CryptoBilis and not from a different reseller. It shows that an insider CryptoBilis is either tampering with the wallet or someone from outside is taking advantage of the company to implant chips in the hardware wallets in their possession. I hope no one using Trezor Safe 5 will be affected because the losses are too much this year.
It's not only CryptoBilis. If we look back at the Ledger implants, modified devices were sold in multiple shops. CryptoBilis is one. Lazada in Thailand was another, even earlier one. After that there was a case of a Ledger purchased in Singapore's airport and multiple cases in Europe.
If it's true, then Trezor is being very generous. Last time i checked, Ledger never offered this kind of compensation from anyone who buy their device from CryptoBills.
We don't know that for sure. Maybe those who contact them get free replacements. I remember years ago that people reported that Ledger gave free replacement devices even to customers with expired warranties if their hardware wallets broke.