Trezor developer confirms private keys can be extracted if firmware is corrupt