Effectively, you should treat a yubikey compromised if you suspect it could be tampered with by a third party. But that was already the case previously. It just got a *bit* easier.

can't use a yubikey to secure *anything* - one bad actor with a flipper zero and you're toast

Hi there! The tampering vulnerability you might be referring affects devices with a firmware version below the version we have been shipping to our members.

It's not a good security practice to leave YubiKeys or hardware wallets lying around anyway. Keep them in an access-controlled location and secure them with a PIN.