Ledger provides a 'Genuine Check' mechanism to determine the authenticity of the device; however, it explicitly warns that it cannot detect added implants when the device's original Secure Element remains intact.

And as this workaround leaves the original Secure Element intact, good luck detecting the supply chain attack.

I think that’s where the epoxy from earlier in this comment chain is supposed to come in.