I know ledger is and always has been shit. But can someone who understands the situation shed any light on the urgency for users to switch HWW's? I have friends using ledger who probably haven't updated the device's firmware in a long time and haven't installed the latest update. Are they still at risk? How bad is it?

A) There's no time to talk about it, tell your friends to move their corn onto a hot wallet until they get a FOSS HWW

B) Don't panic, just buy a FOSS HWW and move your corn safely asap