Here's an easy explainer on how this works and how we mitigate it:

https://bitbox.swiss/blog/how-almost-all-hardware-wallets-can-steal-your-seed/