Trezor

The attacker must have physical access to the device for them to be able to do it.