The answer
Yes. QR and microSD are data channels; an untrusted transaction proposal can still request the wrong destination or permission.
What to do next
Read the trusted device's transaction summary and verify outputs independently.
Trezor hardware wallets
Hardware wallet related to device/backup security; not a guarantee of recovery or anonymity. Availability, supported assets and local eligibility must be checked before signing up or buying.
Visit Trezor hardware wallets ↗Official provider link · Compare suitability and availability before choosing.