No those statements track. They never lied about anything. And when they did write firmware they publicly announced it. If it was shipped earlier without a public announcement it probably would’ve been covered under the terms of service
I heard and read aomething about Trezor and coinjoins methods that are not the best.. Can't recall now. Everyone talks very good avlut coldcard.. Last resourt probably.
No they don’t.
“A firmware update cannot extract the private keys…”
That implies it is not possible (‘cannot’) for the most recent announcement to ship.