Good post! But the one who got hacked didn't purchased the device in the official website, it can happen to anyon even to Ledger users.