Multi sig fixes this!

Indeed, and Trezor has used an optional multisig seed phrase approach to address this threat model. Ledger went with a centralised KYC system. Tells me a lot about each company and their values.