Its one thing when you're trusting the 50 people who have reviewed a repo, its another when you're just trusting a company with closed source software. Trezor of course being open source is different from ledger in that regard, but I still don't like them for various reasons.
The most disappointing thing about this, is that we're looking at companies who want to point fingers are their users, people who actually buy their products as the villians, rather than seeing it as customer feedback.