Ledger can open source 95% of their stack right now but it’s primarily because they don’t want to.
The other 5% is NDAs but also is the least important functionality. Primarily because they use a real SE instead of some shitty one that happens to be cheap.