Ledger fixed that exact issue in 2019: https://sergeylappo.github.io/posts/ledger-hack/