::
It’s not „compromised“. They just done a big light on the fact they could always extract the seed from your Ledger, and choose not to.
The major security/privacy risk that is the Recover service hasn’t started operating yet, and is opt-in. And maybe the furor will nudge them into open sourcing more of their code.