As true as 'ledger does not have your keys' may be at this point. Remember that much of their hardware and software is proprietary and closed source. We don't fully know what the software and hardware does or is capable of doing.