When buying a hardware wallet like Ledger or Trezor, make sure to buy it directly from the official website or authorized sellers. Some scammers are selling fake ones that can steal your cryptocurrency.
Ledger is not a good hardware wallet so don't try to buy any Ledger wallet.
Trezor is good and recommended but you can find more open source hardware wallets.
[LIST] Open Source Hardware Wallets.Choosing good hardware wallet brands, and buy a wallet rightly.
[GUIDE] How to buy a Hardware Wallet the right way.Generally, your advice is right, that only buying from official stores, and avoiding to purchase from third party websites as well as second-hand hardware wallets.