The Ledger supply-chain incident is a prime reminder that specialized, dedicated hardware = dedicated targeting. Single-purpose hardware has a big attack vector, since hackers know exact hardware architectures, specific firmware stacks to target, and that anyone buying one is holding high-value assets. You're walking with a target on your back.
You end up in leaked customer databases, targeted by physical supply-chain attacks, or hit with fake firmware updates. There's an entire industry around this with Trevor/Ledger phishing kits, etc.
Hardware wallets are honestly one of the biggest psyops in crypto.
You're often way better off using a clean, dedicated smartphone with zero extra apps installed.
It can either be a dedicated iPhone with hardened hardware security modules (Secure Enclave), or an Android + GrapheneOS with hardening options, network permissions toggle per app and full isolation.
Both are way better than HW wallet vendors.