I'd never trust Ledger. I'm embarrassed that I ever trusted them in the first place.
Me neither.
Many people fell for their heavy advertisement and they paid good money for that promotion on youtube and social media.
Let me also add that ledger with their
blind signing was one of the reasons was latest massive hack of bybit exchange.
Anyone still using closed source hardware wallet with blind signing should stop doing that asap.
From what I understood
in the tweet they posted, the issue was the use of third-party software compatible with Ledger that didn't support Clear Signing.
https://x.com/Ledger/status/1893956121385165278Ledger reinforced the use of Ledger Live which supports Clear Signing. This means there are many people interacting with tokens and smart contracts on third-party wallets connected to HW, where users are forced to use Blind Signing.
They also stated that they will take the initiative to ensure that third-party software compatible with Ledger provides support for Clear Signing.
In any case, it's recommended that all users verify what they are signing, no matter how confusing Eth and other network smart contracts may be. On BTC there are no such shitcoin complications.
Ledger's word means nothing. What they say is irrelevant because their words cannot be trusted.
Ledger said your keys never leave your device while they were writing key extraction code. Ledger said an employee was phished, but then had to admit it was a former employee. Ledger prints "We are open source" on the box for hardware that runs closed source code. Ledger says they've never been hacked but they pay bounties to those who hack them in exchange for their silence. I wouldn't be surprised if we find out the company's name isn't even Ledger. Nothing Ledger says can be trusted. Nothing. Ledger is dirtier than a pile of dirt on a dirt floor.