The hardware wallet doesn't "know" that you are sending to yourself. As far as it knows, you're creating a standard transaction. Unless it checks for exactly this type of attack (are the addresses similar enough to be suspicious?)