That is what this discussion started with: get a Trezor from official site with seal. Reflash the firmware if you are this cautious.

FYI I have a huge chunk of my net worth inside one of it, I have no lesser concern than you on the security issues.

I shall thank you if you can pointing out any better options over hardware wallet, which so far you have not. Please feel free to enlighten me further.