I disagree. You cannot exclude the possibility of dishonest employee(s) tampering with devices. Even if that's not the case, manufacturers do not deliver themselves. Whoever collects parcels from them (to be sent out to buyers) probably knows what kind of product they are dealing with. It doesn't take much to replace a legit device in a package with a tampered one.

And it's definitely not just a case of one "shady" reseller.
The scale of the incident seems to be much greater than initially reported. Mediamarkt (a major European electronics retailer) today decided to pull out Ledger wallets after there have been reports of people finding implants in them (bought in Mediamarkt stores at different locations):
a major European electronics retailerhttps://cointelegraph.com/news/mediamarkt-pulls-ledger-wallet-security-incident

Even our good friend Mak Karpeles is reporting on finding a spying chip on a Ledger wallet bought at Singapore airport:
https://x.com/MagicalTux/status/2109916873689280900
credit to cygan for posring this in another thread

I saw the tag.

Seedsigner and its fork Shieldsigner are two good options. They are stateless and airgapped. You can input your own entropy from dice rolls or coin tosses. Shieldsigner also supports smart cards like Satochip.
Another airgapped and stateless signer is Krux. Then there is Jade (can be both a classic hardware wallet and a stateless device). Other popular brands include Passport Prime, Specter, Keystone, and Keycard Shell.

hardware wallets have many ways to be used.
probably the worst would be something related key generation or just storing/connecting directly online.
meanwhile it's always interesting have an hardware wallet that could easily sign a tx. probably this could be the best "real use" for a bitcoiner.
or just as collectible . some of these have a niche area of interest - I have fews from various makers only for this purpose.

The Coldcards were purchased from the official website, yet that didn't save their buyers \ owners.

Using hardware wallets is becoming riskier by the day, as malicious actors have launched a veritable "hunt" for the contents of these wallets.

This is not the only attack that prompts consideration of alternative ways to store crypto assets.

New crypto owners, who are far removed from technology and poorly informed about incidents (and the potential threats posed by resellers and intermediaries) are more likely to buy a HW device at a nearby electronics store (like Mediamarkt - by the way, Ledger has temporarily suspended sales to this reseller) than to go through the hassle of purchasing one from the official manufacturer.

And they put their personal data at risk for 90 days (with the possibility of a data breach).

But you still remain the owner of ledger HW, right?

By the way, how much do you trust this devices you bought earlier? What portion of your portfolio is stored on those wallets?

It is time for HW manufacturers to rethink their device design strategy: specifically, to prevent unauthorized tampering with internal components, they should start making HW device casings out of solid metal so that the internal circuit board can't be accessed without damaging the housing. This would eliminate the risks associated with tampering by resellers, intermediaries, carriers, and delivery services. Of course, this assumes that bad actors don't figure out how to completely counterfeit the outer casing - opening the original, installing additional internal modules, and then re-encasing the unit in a replica housing. All in all, manufacturers have some food for thought here.