How so? Trezor had a vulnerability where you could extract the private keys by measuring power draw.

Trezor seems much worse, in nearly every security write-up I have read.