Most people don't check software…
Most people don't check software signatures (and never will), so hardware wallets like Coldcard, Trezor, Ledger do it for them.
Does this require trust? YES
Is it better than the alternative? YES
If your wallet doesn't also check firmware signatures for you, you are at risk!