[1] If it's on latest firmware, check if you can downgrade to previous firmware and re-apply latest firmware. This should ensure that your BIOS firmware isn't tampered.
Mind sharing why this ensures that the BIOS has not been tampered with? I have never heard of this option. Downgrade and then re apply the latest? Is it about the signature verification?
-----
They've done a lot of oddities, the last one being a "feature" to recover the seed off the HW (and no, not in the moment is generated).
Is it the 'cloud' Service they started offering a while ago or is it something entirely different? I just realized how stupid things are with the Ledger. You could pay them to store your Seed onto their Servers but I am pretty sure there is no way you can see the Seed yourself! I think it was impossible to see the Seed again if you lost your piece of paper holding it, or forgot where your washers were buried at!