About hardware wallets and security: https://www.youtube.com/watch?time_continue=771&v=Y1OBIGslgGM
AV's only detect very well known or very poorly coded malware.
Anyone who slightly has a clue how to code properly, can create malware which is completely undetected by any AV.
So.. definitely possible.
Regarding the youtube video.. Besides multiple other requirements, an attacker needs physical access..
If i gain physical access to your credit card.. it is WAY easier for me to steal your money. Just take the credit card and use it. This is not the case with a hardware wallet. Even with multiple exploits it is more complicated than that.
Therefore i don't really think your money is more secure in a bank...
"Be your own bank" implies that you also have to deal with securing the funds.