No such thing as a perfectly good Trezor or Ledger.

At best we might say sufficient.

To be fair I'm not sure anything might be perfectly good. Even Glacier Protocol hopes there's not firmware malware on bother motherboards of your two eternally offline systems if I recall correctly.

You want perfect security prepare to do a LOT of pen and paper math with thousands of rounds of manual hashing on top of dice rolls. And of course don't make any mistakes...