Oh yeah definitely

But consider that anyone who’s using a company node to pull balances likely can face the same risk

If you’re not pulling balances from your own node you are trusting someone else with your privacy (to an extent, there is nuance of course)

privacy (or security) with a Ledger? That's funny.