It ultimately comes down to **you have to trust Ledger** which in combination with **Ledger lied** and **Ledger lost all user data** isn't such a great option.