Very strange story. The author claims that he downloaded Ledger Live from the App Store and the wallet passed the authenticity check normally. So the problem is unlikely to be in the wallet itself
The following things also confuse me:
According to the author, the victim was new to cryptocurrency, but transferred an impressive amount of more than $200,000 to the wallet.
The provided screenshot shows that the wallet has been verified and not a single application is installed, although ETH and TRX must be installed at a minimum. That is, they took a screenshot even before the hack, which is very strange, because according to the author, after the hack the wallet was no longer touched and nothing was installed or deleted.
Of course, you can check your wallet by resetting it to factory settings, create a new SEED, put a not very large amount on it and see if it gets stolen. But, in my opinion, they are not telling you something, or it's a trivial leak of SEED by an inexperienced user.