Probably building it yourself. If you didn’t build it yourself, it should at least be easy to take apart and inspect.
I sort of agree here. Trezor is proud of the tamper-evident welding but a sophisticated attacker that would attack at scale could easily fake it. Better make it such that you can easily open it.