Ledger is closed source, which is not great. Also, we've submitted bug reports to them before explaining how malware on a laptop could extract coins from users, and the response we got was 'won't fix'...

Which is not great. The entire reason you use a hardware wallet is because you assume that less secure hardware has been compromised.

I don't know that I would go as far as saying 'don't use ledger' though, all the hardware wallets have pros and cons and we don't really have a champion 'this one is best' yet. Though I might point to https://foundationdevices.com/ as being on the right track.

If you are part of the leaked info[1], you are basically a walking target(mine was leaked, I constantly get phishing emails).

Trezor has had better service but this could as easily happen to them. To be really safe Coldcard is the best option.

[1] https://news.bitcoin.com/ledger-wallet-customer-data-leak-in...