It signs for almost everything
No competitor comes close on chain and application support, and the clear-signing implementation on major protocols is mature. If your holdings span a dozen ecosystems, this is often the only device that covers all of them, and the companion app is the most polished in the category.
May 2023
Ledger announced a paid recovery service that splits an encrypted seed into shards held by third parties. The backlash was not about the service — it was about what its existence proved: the firmware can be built to export key material, which many owners had assumed was impossible. Nothing changed technically that week; what changed was public understanding of a closed system, and the trust cost was permanent.
Closed by construction
The firmware is closed source and only parts of the surrounding stack are published, so builds cannot be independently reproduced. The certified secure element is strong and no extraction of a seed from a current model has been published — you are trusting the vendor's word about the layer above it.
The 2020 breach still costs owners
An e-commerce database leak exposed customer contact details, and the resulting phishing — including counterfeit devices mailed to real addresses — has continued for years. Treat any unsolicited Ledger communication as hostile.