The long-standing objection to Trezor was physical: without a secure element, a device in an attacker's hands was a solvable problem given time and equipment. The Safe 5 closes that hole with a certified element while keeping the firmware open, which is the combination people have been asking for since the first Model T.

In daily use the touchscreen is the upgrade you feel. Confirming a send is a matter of reading the address on a colour panel and swiping, rather than squinting at a two-line display and clicking through pages.

Shamir backup deserves more attention than it gets. Splitting a seed into shares with a recovery threshold is a materially better answer for households and small treasuries than a single sheet of paper in a drawer, and it is built in rather than sold as a service.

The limitations are real. Asset support is narrower than Ledger's, and anyone holding long-tail tokens should check the list before buying rather than after. Trezor Suite works reliably but consumes more resources than a wallet interface ought to, and third-party integration is improving rather than finished.

For the majority of self-custody users — bitcoin, ether, major stablecoins, occasional dapp signing — this is the device we would recommend first, on the simple grounds that you do not have to take anyone's word for what the firmware does. Four and a half out of five.