[jiehong]

That’s the point of a hardware wallet: nothing goes out of it. So no machine can read the private data from it.

Just like a smartcard (like a yubikey).

[mazamats]

He still cloud have connected his Ledger to a compromised client and didn't double check what he was signing before confirming it.