Checked ledgers bought in NL 2024/2025 from coolblue from a bunch of folks and my own, no tampering found. Also nothing on ones directly from Ledger. Ledger should recall all unsold devices from resellers. Those who don’t return them automatically end up suspended as authorized resellers. Those who return but have tampered devices, should also be suspended. Then figure out who was in the supply chain and identify the culprits. On top of that, federal agencies should do a deep investigation. In the end, a completely neutral audit can’t come from the manufacturer. Also, this is unlikely to be Ledger only HWW manufacturers should red team their own devices on how they could be tampered with and regularly randomly check their own and external supply chains, for starters Unfortunately it is difficult to think of any good alternative for day to day signing usage that is somewhat secure, what am I missing?