I also have read where people unknowingly bought a cloned trezor hardware and they were hacked. Alot of efforts needs to be put in place while securing and set up these wallets. Be it hardware or airgapped software.
There have been various types of hardware wallet-related scams in the past. The problem is that people rely too much on google search and the ads the service generates. That's one way they are led to a fake site offering fake Electrum software. connected to the data leak by Ledger and its partner company.
Permit me to go a little of topic here.
Before my arrival to this forum, someone offered to pay me big while I help them use my Google account and set up ads for their company. I would have agreed due to some convincing reasons they gave, just that it will involve my credit cards and so. I declined the request even when the process was close to complete.
Few weeks or months later, I was greatly surprised to see the project I declined to promote on the first page of google ranking and it was a cloned website. It was there my idea of google changed and taking everything from google search serious stopped.
You should also never trust recommendations given by random people on social media or follow links from unknown users on Telegram.
I have known this as a red flag. When someone you don't know is 100% willing to help without a fee. It is only in this forum people genuinely help and for free
Ask and learn, so you don't put yourself in a position of losing your money.
I do not pretend to know more than I actually know. There's no need pretending when there are people to help. As a good learn, I am not even ashamed to ask even if the simplest question. The worse scenario would be that I won't get a response, but then no one will flag my account.