Verify Trezor Suite

Hi. I have been using desktop suite for a long while and never had a problem but could there be a chance that it is a malicious version? How could I check without having to do a complex exercise?

And secondly, even if it was malicious, I assume that the worst it could do would be to change actresses and could not extract any info from the device?