Use a device that’s mass produced enough it can’t be targeted e.g a MacBook, then keep it airgapped and don’t do normal computing on it.
An ordinary MacBook does not have that issue. If you are a high-value target, you can further decrease your risk profile by buying it from a random physical store, further preventing targeted attacks.
In retrospect @gigachad’s summary is worth as much as both articles combined, but for the Clauded technical source (with pictures!) that Ledger’s Claude-release refers to: https://www.tibane.net/research/ledger-nano-x-implant
The ones with hidden eSIMs aren't!
Keyboard traffic is plain. Bluetooth access depends on where you are positioned. DVI is not hard to decode for capturing the entire screen. KVMs are so small now that one could easily be snuck in. Even though the motherboard is very compact, there is space above it and near the batteries.
I always assumed the people buying those crypto gadgets were idiots.
also, if Apple falls to a supply chain attack like this where their laptops are backdoored crypto theft will be problem number #10.