Can a connected hardware wallet be accessed by a DApp due to unlimited withdrawal allowance and coins be wihtdrawn?
no
Every time a transaction is made, the transaction needs to be signed by the trezor device. The signing process requires you to manually confirm by pressing the key.
Then what about this article:
@zaphod72 it only comes down to what contracts you approve as a user. If you approve shady contracts it can happen, but in that case HW wallet cannot help you.
If you are not sure about some token or contract and you don’t know what is in the code, it would be better to stay away from it.