Hi, we just want to add that this is an old vulnerability that has been already fixed. All new devices are shipped with a fixed bootloader.
Learn more about our Security approach and our responsible disclosure program👇
https://trezor.io/security/