This is a terrifying exploit ("yes, absolutely"), but it is a one-time exploit that is not intended for sustained data xfer. It steals your initial cryptoseed (via SPI display linkage; no cryptographic exploit of ledger device is publicly-known, yet), and only has to broadcast one time from its literally-hand-wound antenna.
I believe one million+ devices are "suspected."
----
I'm just beginning to play around with Docker, and I have a spare eWaste Intel 4xxx (with dual PCI slots and two 56k modems!~); hoping that my own MacBook can "dock" in to my landline's RJ-11 "virtually" – that I can figure this out with LLMS as a dumbass electrician is incredible! – exciting stuff to learn'bout.