You can read official response here.
(https://blog.trezor.io/our-response-to-the-read-protection-downgrade-attack-28d23f8949c6)
So they acknowledge the hacked, however, for us more mortals, it will be very hard to perform that exploit, as you need to have special skills to really break the hardware wallet, so it's not that easy as it sound. So for me it is still 100% safe.
Correct, you can read from their response that you need to see the conditions before the hackers can exploit the system. Then you have to the skills or specialised hardware to get inside and perform the exploit. And for those who wanted to buy Trezor, go for the official site and not just from some websites so that you will stay safe.