If they were a publicly traded stock I would be 💯 sure they were shorting their own stock. 
Discussion
This is true of any device that allows firmware updates.
Which is why open source is the way. But their damage control is dreadful
Open Source + Reproducible builds.
Plus the time and skill set to build the ROM yourself and load it.
I feel confident you get it, but I often wonder if everyone does.
Oof. That might be the final straw that retires my Ledger for good. Brutal.
Not good.