I would say that ledger website shop isn't safe anymore, their products maybe the bests of the bests but if they keep leaking their users info without proper action of actually stopping it, then how it differs from a normal hack of some bitcoins, its even more dangerous since its a data that didn't expire, not unless you change everything, from email, mobile number to your address which is more difficult to do.
I am completely agree with you on this matter of user's privacy. Worldwide crypto user are using ledger's hardware wallet for their crypto assets extra level of safety but if ledger authority can't keep their users information than users will have no more option but avoiding them.
I would say avoid them for the time being, but if you still want to purchase some ledger HW, better to use their official retailer store nearby instead of directly from them.
Directly using their official website is the most safest way to purchase a ledger and as far as i know they have their official store on Amazon. Beside that there is multiple store in there and if i am not making mistake then they are selling from different region. All our awareness will not gonna make big difference in this case if they can't detect the insider who I connected with data leaks.