cincy (nprofile…wlfv) Trezor is not affected. The bug lived in Coinkite's own libngu, which quietly fell back to a software PRNG instead of the STM32 hardware chip, so it never touched anything Trezor ships.
Your passphrase does real work here, because it derives a wallet the attacker cannot reach from the weak seed alone. I would still generate fresh on 5.6.0 or later with your own dice rolls, since leaning on the passphrase leaves the base entropy weak underneath.
