It's just a matter of time before a larger vulnerability is exposed at Ledger. Even rugpull disguised as hack. Good to spread the risk though.
Discussion
Oh yeah... And who are we to say that Ledger will be the only one?
That being said I feel quite OK with my new, cheap Trezor that has seen Rocky Linux with biometrics for sudo and #Bitcoin only, running Tor over Mullvad every single time :-)