Ledger’s decision to introduce a third party to your wallet seed phrase created an exploit that could appeal to both governments and hackers.