It doesn't get much safer. Your Trezor private keys are never exposed to your PC or mobile device. So they are never accessible on the network, local or internet.How safe is this? I've been wanting to get away from centralized exchanges and go this route, but paranoid about having my funds drained.
Let's say that your computer, unbeknownst to you, is hacked with malware. The malware logs every keystroke, every screenshot of your screen, every movement of your mouse. It records your wallet passphrase, and your secret pin.
It still can't access the private keys on your hardware wallet. Your funds as still safe.
(THAT IS, as long as you NEVER record the seed words on your electronic devices.)

