It's interesting that ledger donjon team mostly reports about issues with open source wallets....just saying 
No, not really. Open-source is a book you can open and start reading and analyzing. Since that is not the case with closed-source hardware wallets, I can see why they try to manipulate those from the first group. They are doing great job with all other wallets except with their own ledger device.
It's important to distinguish between threats and vulnerabilities whose successful execution leads to the lose of coins versus things that affect ones privacy or the functionality of the wallet. At this time, I am not aware of a successful way to attack a Ledger hardware wallet to retrieve coins, the PIN, or seed from it. That doesn't mean there isn't one. The Ledger Donjon team focuses on attacks where you can actually lose your money. It is true, though, that their proposed Ledger Recover mechanism is both a security and privacy threat.
