Disclosure: I'm a dev at Ledger working on the desktop and mobile apps. I'm not in the hardware team nor the security team.
> all the bluetooth, screen and button IO goes through an unsecure processor
On the new device, the screen and buttons are now directly wired to the ST33 secure element