::
– According to Ledger, the Recover service is opt-in, and you will need to manually/physically accept the service by pushing the buttons on the hardware wallet before is it is activated.
– And according to Ledger, passphrases are not stored on the Recover service.
So, you have these options:
– You trust Ledger fully. You don’t make any adjustments.
– You trust Ledger, but don’t trust the third-parties or the risk of having your recovery phrase extracted. In that case, you can add a passphrase, and transfer everything to the new addresses.
– You don’t trust Ledger. Stop using the Ledger, get an alternative and transfer everything out.