Your Ledger is hardware-tamper proof. But if you didn't buy directly you should check that your Ledger is genuine and, if being genuine, that someone has not pr

Your Ledger is hardware-tamper proof. But if you didn't buy directly you should check that your Ledger is genuine and, if being genuine, that someone has not pre-configured it. This is basic stuff that has been a potential concern from the beginning. If it's not genuine, your Ledger hasn't been tampered with. If it is pre-configured, your Ledger hasn't been tampered with either - it's been pre-configured. You can reset it and start over with a brand new seed. But if you use their pre-configured seed, the attacker will effectively have the keys to your Ledger. Neither of these are physically tampering with the Ledger itself and it's impossible to avoid either attack with any device of this nature. You need to receive a device (which may or may not be genuine) and you need to configure that device (which may or may not be pre-configured by an attacker, hoping you just use the pre-configured seed).