::
ledger is not compromised and has never been.
in fact, nothing security-related has changed unless you opt-in the upcoming Recover service, which requite ID verification and is not free. Of course you should trust ledger that their firmware is not malicious and cannot be exploited, as always.