Somehow it doesn't seem to me that there is a single hardware wallet that is not subject to physical attack, it's just a matter of how much money and time someone will invest to prove it. It is obvious that there is a certain vulnerability here, but it is also more than evident that LDST is looking for vulnerabilities in their direct competition - but I would always choose any Trezor rather than Ledger for reasons that are probably well known to everyone.

Speaking of vulnerabilities, one of the older Trezor models has an unfixable vulnerability that allows extracting the seed when the device is in physical possession and when no passphrase is set.