pull down to refresh

No, it needs physical access to the device and a very specialist hardware to extract the private key.
The extractions were done on yubikeys, but Trezor has the same component. Then, theoretically it is possible, but it is hard and no one reported about it.