If passphrase support will be added, can you consider implementing a method to counter potential keylogging on the host computer? Like maybe a scrambled-letter cypher on the Ledger's screen that changes each time?
+1 (although I don't know if feasible on S's display)