To make sure I understand, these attacks only work if someone get hold of your hardware wallet (either before or after it's delivered)? So they are stil safe if you buy it directly from the vendor (and trust your delivery service etc.)?
The Ledger Blue was vulnerable to sniffing the PIN entry by radio, but Ledger claims it's not usable in practice.
All attacks against the Ledger Nano required them to get access to the device then give it back to you.
All attacks against the Ledger Nano required them to
get access to the device then give it back to you.
Doctor the devices to use predictable private keys, sell at a loss to be the cheapest seller on Amazon, then grab all the bitcoins at a time of your choosing, because you know the private keys.