~snip~
But with a closed-source unit like a Ledger, you can't check anything related to its firmware, and yet it's there among the recommendations.
However, if you look under
"Transparency" you will notice that only Ledger is marked
"Acceptable", and all other HW are marked
"Good". Maybe it would be better if there was a
"Caution" label, but obviously we don't all have the same attitude when it comes to things like leaking the complete database of their clients or the option of sharing seeds with third parties.
What is missing in my opinion is the
"Security" tab, because potential buyers should be aware that, for example, Trezor HW has an irreparable vulnerability that allows someone with physical access to the HW to extract the seed in a relatively easy way if it is not protected with a passphrase or the user uses an SD card for backup.