It seems to me that you are making a bit of a hasty conclusion in this case, claiming a leak or a way to bypass the authenticity check, because there is no "iron" evidence of this (the author provided little information or it sounds a bit dubious)
Considering how many Ledger hardware wallets are out there and are being used for storing crypto, I think we would see more stories of people who bought fake Ledger devices that somehow passed Ledger's genuine check and could connect to the real Ledger Live and its servers. At the same time, I don't know what else can surprise me when Ledger is concerned. I can't think of one good thing I have seen them do recently from the top of my head. In spite of that, crypto still remains safu, except for when users make mistakes.