Ledger's internal chip was closed source.

Fortunately Trezor is open source so we should know if pressure has been applied to SatoshiLabs before we're compromised. An added passphrase should also increase security. It probably helps that the chokehold point is located in the Czech Republic and not some more western aligned "woke" nation.