Because it wouldn’t really make much sense to stop selling the Trezor Safe 7.
With this vulnerability, an attacker with physical access, an expert skill level, and more than €30,000 worth of specialized equipment could extract TROPIC01’s secret contribution.
The attacker would still have to compromise the second secure element.
They would also have to compromise the STM32U5 protection layer and somehow obtain or brute-force the user’s PIN, which can be up to 50 digits.
So, I don’t see how scrapping these devices just because one layer of defense can be compromised in a laboratory setting makes any sense.