Sort:  

"Opt-in" but the logic is in the firmware, so anything is possible. They recently just had a bug that was patched a week ago that allowed you to spend bitcoin without signing the transaction.

Sounds like ledger is more of a danger than a security then.