[xiphias2]

It's impossible to use a hardware wallet without exposing the master public key to an untrusted device (not hardware wallet).

The only solution would be to run a Bitcoin node on the hardware wallet itself, which is not possible right now.

So you have to treat the public key as a public key.

[gruez]

That would involve your computer being already compromised. If that's the case AND you have enough bitcoins to warrant running a quantum computer worthwhile, you're not securing your coins properly.