Quote from: NeuroticFish on April 01, 2022, 02:23:53 PM

If you don't start the Bitcoin app (the one installed inside your HW) in Ledger Live they don't know your xpub. So imho you can update without them knowing everything about you. Am I missing something?!

I don't think you can say that for sure. Given that on Ledger devices you can enter a passphrase without opening the bitcoin app, then clearly it can still access the seed phrase and perform operations on it, which will include potentially deriving public keys. Given it is closed source, we can't say for sure this isn't happening.

I think the best option is to have your basic wallet completely empty and only store coins behind additional, temporary passphrases. If you then only unlock your wallet but never enter a passphrase before connecting to Ledger Live for updates, and only open your passphrased wallets when connected to your own Electrum server or similar, then this should (but again, we can't be certain) prevent the public keys from your passphrased wallets being leaked during an update.

Alternatively have a dummy seed phrase which you enter to the device prior to any updates, and then restore your real seed phrase after.