Ledger is closed source so their claim that their chip is secure is what they said but what cannot be audited publicly.