An update is irrelevant. As I explained earlier in this thread and in the tweet just above, the whole point of Ledger's Secure Element was that the private keys could never leave the Secure Element. We now know that claim is a lie, and has therefore been a lie since day one. A simple piece of code is all that is required to extract your private keys. All Ledger devices are vulnerable whether or not you opt in to this or update to the latest firmware.

This kinda give me some biggest concern, as the process everytime we use our Ledgers in doing a transaction, we have to approve it through our devices and this requirement is kind of sick, those that will avail the service should review this first.