When it comes to hardware wallet security disclosures, Trezor has set a good example this time.

Trezor discloses that the tropic01 chip used in Safe 7 has a vulnerability, but user assets remain secure, requiring physical contact and advanced techniques to attempt, and there is no evidence of real-world exploitation.
The vulnerability was independently discovered by Ledger's audit firm Donjon, which helps improve the security of the crypto ecosystem.
Trezor CEO Matej Žák calls for public disclosure to become an industry standard.