About hardware wallets

I saw a few threads about hardware and paper wallets, but I didn't find what I was looking for.

Some people claim that paper wallets are better than hardware wallets, but then how do they sign transactions? By hand?

The main benefit of a hardware wallet is that the transaction is signed INSIDE the hardware wallet and the private keys never leave it.

As soon as you send a private key to your mobile phone or computer, malware can steal it.

Of course, hardware wallets can be stolen and pins (even long-ish ones) can be recovered with enough computing power (gpu clusters) and specialized tools.

The most secure way would be to use a blank hardware wallet and reinitialize it each time with the seed phrase. No one can recover a seed phrase.

Anyway, my main concern is the following. Hardware wallets can't connect directly to the internet and are also usually connected to software wallets such as MetaMask. They receive transactions, sign them using the private key, and return the signed transactions.

The problem is that some malware is able to intercept and alter the transactions right before they reach the hardware wallet. Unless the hardware wallet shows the transaction data, including the calldata, there's no way to be sure we signed the correct transaction before sending it to the blockchain. Once we read it in the mempool or in a block, it's already too late!

Question: do you know of any hardware wallet that shows, on its own display, both the destination address and the calldata of the transactions it's about to sign? [and ask for a confirmation, of course]