I woudln't personally buy trezor / ledger otherwhere rather than manufacturer.

About the ledger thing, yeah the kid hacked the ledger in like 1/100.000 circumstance like he had physical acces to the device and a lot of other variables were into place... I don't know what to say :D