Sir @qubes-anon, you are awesome. What an extremely simple fix.
Someone will need to notify Trezor that this needs to be added to their wiki instructions (I’ll get around to it at some point if no one else beats me to it) - Trezor is working perfectly for me now on an 4.1 minimal template as the sys-usb by just chmod +x
As to the inserting firewall vm’s in between each of the VM’s to get them working - not something I have tried yet. Seems like it should not be necessary, but at least it sounds like we have a workaround if that works.
This last comment is in response to this workaround post in my previous thread: