The red text is the key. I also came here to point this out.

The ledger guy is arguing a technicality. If you check the address in the screen of the hardware wallet, assuming it has one, then you will be safe, or at least you'll see the wrong address, but you must be very careful because this exploit is sophisticated and will actually calculate a address that looks as close to the one that you're sending to as they can find. So just checking a few digits, it's not enough in this case. If I were moving big coins from hardware wallets right now using their software, I would definitely check the entire address.

That points out another important point. The issue is with the wallet software, not the hardware. So if you're using Sparrow, for example, you're okay, because they don't use those libraries. (STILL CHECK) But most of the big commercial wallet designers use those libraries and their bundled software.