After Coldcard, will Ledger attack further kill trust in self-custody?