In fact, no hardware wallet manufacturer can be trusted 100%.
It is not necessary to boycott Ledger or Trezor. You just need to be aware of the existing risks and take this into account when storing your crypto assets on these devices. The realization that one day, your money may not be on these hardware wallets. Who even came up with the idea that they (and others) can be blindly trusted?
I don't know whether that true or not but I came across the mention that Ledger wallets are assembled by Flextronics. This means that Ledger company doesn't have the facilities to produce hardware and rely on 3rd party which in turn may aper as the other potential "hidden" and weak section in the trust chain.
Thus, the best approach for keeping bitcoin stash safe is to use multisig wallet with HW cosigners from different manufacturers.
Quote from: https://community.st.com/t5/archive/could-you-please-confirm-the-eu-eccn-number-of-st33k1m5/td-p/144206
