Trezor’s security breach was traced to a meticulous phishing operation, not SIM-Swap