So by your definition, "cold storage" is a keypair which is generated completely offline, and from which not a single coin is spent from, nor signed to prove ownership publicly?
There is no cold storage possible for masternode use, by that definition.
The trezor does not simply protect against...