Saddest six-word story:

"For sale: gifted Ledger, never used."

Is the sad part the lack of adoption...

... or is it that the buyer is about to have a bad time?

Yes.

Wannabe contributor for /walletbeat.

Censorship resistance requires privacy.

You can safely buy used ledgers. Resetting completely wipes it and ledger has a “genuine” check when you connect for the first time. Zero risk if the check passes

Head of Product at @syky /digital-fashion. Love all dogs and especially my own. ex-Ledger

Sure, though that's only zero risk under the assumption that the user desktop starts out uncompromised when running the Ledger Live software during setup. And if you can make that assumption, that removes part of the value prop of buying a Ledger to begin with.

There is also the attack vector of the internals of the Ledger are gutted and replaced with a BadUSB-style board which forcefully installs and overrides the Ledger Live application on the user's desktop before the real Ledger Live software can do anything about it.

Overall, doesn't seem truly zero-risk to me.

The practicality of this is non-existent. I can’t even enumerate the list of things that would have to happen for this to be worth the attacker’s effort