They're both pretty much the same.
The fact Trez got hacked at least says they have found one vulnerability.
Ledger has not.