If one as an user is not willing to go through all the hassle of analyzing the software and hardware of what one has bought, it is better just to go safe and buy directly from official vendors.
Needless to say, most of the average person interested in acquiring a hardware wallet does not have the capacity to analize both the firmware and the hardware of those products...
![Roll Eyes](https://bitcointalk.org/Smileys/default/rolleyes.gif)
Even if it lies in the Code and you do have the capacity to Analyze the Firmware, mistakenly skipping a single line or not being able to connect the dots at the right time could lead to using a malicious Hardware Wallet and even Trusting it since you did analyze both its Firmware and the Hardware too.
Even if the Seller is reliable and trustworthy, you have no idea whether it was a device they purchased from official sellers themselves or if it was a device they got for free. What if they are actually selling a device they thought they received as a gift in their Post.
So at the end of the day, there are so many possibilities it is still so much more convenient to either purchase it from a legitimate official source or to just create your own Airgapped Wallet. While not the most convenient User Experience wise, it is the Safest choice for OP still.