I think it's overblown to an extent but that doesn't change the fact that ledger could change things in their next firmware update. The fact that they have the ability to do so causes worry and I understand that some people just want to make sure that their crypto is secured offline.