This connection is truly secure for one important reason. Trezor only allows connections for the purpose of reading data. Therefore, the application can never command your Trezor to do any manipulation of the cryptocurrencies stored on it. The application is only allowed to read addresses and balances when connected. This is used to allow the app to view the progress of the portfolio stored on the Trezor or regular investments deposited on the Trezor.