This is why I'm skeptical of hardware signing devices with permanently installed batteries. Just pulled a Ledger Flex out of storage (in optimal cool & dry conditions) and the battery has swollen and ...
I've seen this with phones many times. I wonder if it would be better to build it intentionally to only power on when plugged in, leaving out the need for a battery. Less convenient, but also less to go wrong.