And still they ignore the most pressing question that everyone is asking: Why is this even possible in the first place?
They are and the way that they are doing it is shocking - They keep stating that as long as the user doesn't activate the backup,
then everything is OK. Look at this contradicted reply from Ledger Customer Sucess Team[1]:
- Ledger designs what the code can and cannot do with the seed, and this has always been the case. As always, we design this code meticulously and with true security in mind every step of the way.
- The new 2.2.1 firmware contains new code that can manipulate the seed in order to split it into 3 separate encrypted shards.
- This new sharding feature, as with every other interaction that touches your seed, requires your consent with a physical button press in order to create the encrypted shards of your seed. If you're worried about this feature, you could choose to never trigger or accept the seed sharding operation.
Since their customers were basically sold a lie - their recovery phrases would never be able to leave their device - isn't this a solid ground for a class-action lawsuit?
[1]
https://safereddit.com/r/ledgerwallet/comments/13j5cna/introducing_ledger_recover_answering_your/jkea6xw/