It's open source!  ...except for the part that isn't, which means you can add that lie to the long list of Ledger lies.

Any closed source code means the code isn't open source, because the code contains code that isn't published and thus cannot be verified to be safe.