Not an answer, but to add to the question,
either those two keys are enough to recover your funds, in which case they can be used to steal funds, or you need all 3 keys, in which case this isnt a backup at all. Either way, this seems as foolish as everything #ledger does.