Compromised Ledger devices passed official software genuine checks because the factory secure element remained unaltered