I don't have one myself, and for good reason. Researchers from Ledger were able to pretty quickly break the security on it, dump the memory, and extract the private keys:
https://donjon.ledger.com/Ellipal-Security/The device is essentially a re-skinned low end Android mobile phone. There is no secure element, and the only thing protecting your private keys is your password. It has a USB connection which simply doesn't have the data pins connected. Connecting up these pins allows data access over the USB, which allows an attacker to access the bootloader, dump the flash memory, and access the encrypted private keys. Once an attacker has downloaded your encrypted private keys, they can perform a very rapid brute force attack on your password, which is (like most user-generated passwords) likely to be both short and weak. Even if you keep your device physically locked up, there is no built in software checking mechanism, so no way to confirm the device hasn't been backdoored or supply chain attacked before it reached you.
All in all, I wouldn't recommend. Not to mention that it is over 3 times more expensive than a superior Ledger product.
