Your sarcasm is fair, but the facts don't change because I annoyed you. Two separate things got confused: a breach at a third party service provider, and the security of the hardware wallet itself. The data that leaked was customer contact info, not keys. That's why Coldcard can point at it without being a hypocrite, since their pitch is that keys never leave the chip. Now, is it a bold marketing move? Sure, a bit rich coming from a company whose whole brand is "we don't have your data because we don't collect it." If Ledger's real exposure was customer data, dunking on that looks like throwing stones from a glass house nobody asked them to build. So both can be true: the hack didn't touch Ledger's keys, and Coldcard's dunk is still a little smug. Which part do you actually doubt?