"shouldn't" is always what the answer will be.  The code needs to be open source, then we can confirm "shouldn't" is correct, otherwise ledger should just say "trust us, it shouldn't".  

Even if the code was open there are bugs in code that make it a "shouldn't".

> shouldn’t be able to copy the device’s private key without the user’s consent

The word "shouldn't" doesn't exactly inspire confidence.

siggy47

You have to be insane to trust these clowns.

Remember when they leaked their shipping database and tons of people were threatened?