My understanding is that you have to interact with some shitcoin dApps in order to have been in immediate danger, and even then, the target wallets have been neturalized. But Ledger is lazy. Lazy dev practices. Lazy customer data management. It's just a matter of time before they feel thr effects of this laziness.

Harm reduction might be getting them off of Ledger Live and onto a Bitcoin wallet that supports the Ledger device. Then figure out their needs and skill levels as users and see if there are Bitcoin-only devices that can meet those needs. Block's little wallet looks promising, but with tradeoffs that might not be palatable to a power user.