Pfft.  Even the biggest corporations with departments devoted to security can't seem to keep breaches from happening, so I have little faith that a company like Ledger would be able to be sure data leaks won't happen again.  With this new service, they've probably just painted a big red target on their backs for hackers.

I've never used a crypto debit card, but I don't see how anyone (at least in the US or any country with strict banking laws) could use one without going through some kind of KYC process.  The government just wouldn't allow it, and Ledger sure as hell isn't going to run afoul of any government's regulations.