jofus,
I understand where that question came from. We share some similar thinking. Let me extend an aspect of your line of thought. I highly recommend configuring your Trezor offline and NOT on their website. A logical conclusion to your concerns would be just maybe the 24 word seed gets intercepted while coming from online. They have the greatest reputation, and yet still if configuration happens offline there is nothing to intercept. Just saying! It is very easy to initialize a Trezor offline.
Topic: How is Trezor mnemonic generated? (Read 805 times)
Trezor uses BIP 39 to generate the mnemonic seed. You can read about how it works here: https://github.com/bitcoin/bips/blob/master/bip-0039.mediawiki
When you get a new Trezor and you set it up and it gives you the the 24 word string for back up, how is that string generated? How do you know that it is random and where does that randomness come from?
Jump to: