First of all, I want to know that Paul bought the hardware wallet from the official website or some online site where we can buy things with high discounts, if he bought it from a third party website then,

I assume Paul is going to be one of the victims to lose all his portfolio to the scammers because he bought a Ledger wallet which already tampered with by the scammers who sell the actual product for cheaper price with a flash drive so all those recovery seeds entered by Paul will be sent to the scammer then the scammer will take all the money from the wallet will be moved by the scammer to his wallet in no time.

Because for the past couple of years people are losing their money by buying those fake hardware wallet/ or hardware wallets which are already compromised and shipped.