Huge leap maybe, but if what Gazeta did was really just manually check what Ledger Live does, I could think that they'd keep that private so that people would be "forced" to check the device/firmware integrity using the official app, and have more downloads and data spied