This is also not the first time ledger wallet has come under scrutiny, there have bee data breaches in the past that exposed its users to personalized scams. They also did not reveal the hack early enough but waited about a month before reporting on the hack, not giving their users a heads up to change their personal details on other platforms.
Let's not make a bigger deal out of it than it really is. The data breaches were related to customers who purchased their devices directly from ledger and all the breach revealed was their shipping addresses, so it wasn't such a big deal. If you were actively using online stores for the last 10 years, your address is being included in hacked databases sold on deep web anyway. Many people, including me, bought our ledgers from resellers, and we were not affected by that.
I agree that their recent update is unnecessary and in breach of the basic rules of self custody, so I recommend not updating your ledger if you have one and slowly thinking of a new wallet, because one day that update may become mandatory and then you'll become vulnerable. Still with that last update ledger is safer than your average exchange.
As for wallets, I recomend blockstream jade or keystone. Keystone is easier to use but more bulky and supports a number of shitcoins, so if you're not into that and support bitcoin only wallets choose jade. Both have qr scanners and run on batteries, so they're much better than ledger nano.