Some accused Ledger of forcing purchases and claimed migrating to a new device may leave wallet holders open to cyberattacks.