It looks like the tweet was deleted or the link is wrong. Also, it is better to move the topic to the hard wallets section.
Lol, the deleted it because it cause a complete backlash from the community
They made a new one
Part 1 of this two-part Tweet is getting taken out of context.
To elaborate, code can be written to make it do whatever you want it to.
But with Ledger firmware, there are layers of protection and governance in place to ensure that no attacker (even internal) has the ability to publish malicious firmware.
Ledger’s security design and threat model ensures that your private keys are handled with your security in mind.
https://donjon.ledger.com/threat-model/But they have still failed to answer the more pressing questions.
I can't feel disappointed why these services chose to ruin their reputation after building it for years.
In short. Getting greedy for more money.
