Cold environment question

Whats there to steal the pool pledge? I’m still figuring out how to send my pledge, my server is configured for a certain amount of pledge that I am waiting to get on friday.

How does a hardware wallet work? I don’t actually get how it works with the pool. Since the payment.skey isnt a 24 word seed.

What is exactly is a ledger or trezor storing?