I understand that its not good security and privacy practice to reuse addresses after a spend due to the fact that the public key becomes available for that address during the spend and it essentially weakens the security and privacy.
Is an address still considered 100% secure for which has only ever seen inputs/deposits and has never seen a spend?
What if that input only address is on a hardware wallet like a trezor along with other addresses with balances? If I understand this correctly, spending from a trezor could come from any one or multiple addresses which has spendable inputs in that wallet. Once any spend on such a wallet occurs, it's not advisable to reuse any of the previous addresses for deposits.
First of add, adding Trezor into the equation doesn't change anything, it just makes it harder to understand for the newbies. Keep in mind that a hardware wallet only keeps the private keys for signing the transactions.
So, let's go for the main problem.
From what I know, any transaction contains the receiver address (public info) and a signature (based on the private key!) of the sender address.
So it doesn't matter how many times you send money to an address, only its public info is shown. But as soon as you send out money from there, you need the private key, which can be a security risk.
About the privacy, it depends where those inputs come from, since one can link this way multiple addresses you may not want to "tell" they're all yours.