> This isn’t on Ledger it’s a (literal) supply chain attack.

Supply chain attack?

"Can't do shit, not my problem."

If it was that easy to shed responsibility.

TBF that characterization was mine. It’s not been Ledger’s response AFAIK.