Hello, I ordered a Trezor Safe 5 a few days ago because I consider this hardware wallet to be very secure. Afterward, I received an email informing me that the Trezor was on its way. So far, so good.
But what I then saw in the email stunned me: The unencrypted email clearly stated my full name, address, and even my phone number. An email is by no means secure, as it can be intercepted and read at multiple points if it isn’t PGP encrypted and sent in plain text. It’s recommended to buy your hardware wallet directly from the manufacturer, also for data protection reasons, but what’s the point if Trezor itself handles sensitive data so carelessly? As good as the device’s security and the Trezor’s truly excellent handling are, I would have expected much more sensitivity in handling confidential data from a company with such a good reputation and many years of experience.