It was quite a logical course of action if you wanted to buy a hardware wallet, until this happened with Ledger and showed us all that no one should be trusted with your personal information. Therefore, if you cannot make a purchase directly from the manufacturer without compromising your personal information, the best and safest option is to buy such a device directly in a physical store with cash.
I had this option for both (Ledger&Trezor), but I believed more in buying directly from the manufacturer which turned out to be completely wrong. The lesson has been learned, unfortunately in a difficult way - but it is a warning to anyone who is just planning to buy such devices, do everything you can to protect your privacy.
Some people have the option to give fake name, disposable emails and P.O Box like the one from the company someone work from, I see it not appropriate but can be good to avoid such mistake too. But your comment is more perfect,going to store, buying it physically will be the best. I see it as a way data breach if a thing may not occur, and even if it occured, it will not centralized it on ledger wallet only unlike data breach of the ledger wallet site which makes hackers to focus on the people that their data where breached. This is more recommendable for people in a way to avoid hackers.