Instead of answering your questions, I'm going to add another concern to your list:

Even if the hardware wallet is perfectly secure, the weak point becomes securing the physical recovery seed. Storing your seed safely requires a gun at the bare minimum, and would ideally involve you owning multiple properties that are geographically separated to create a multisig.