The Trade-Offs of Cryptocurrency

Ledger is a closed source hardware wallet, the firmware is closed source. You cannot verify what an update is doing to your device when you decide to go and update. There's a reason why Bitcoin Core does not have auto-updates. An attacker can send a malicious update and they don't want it to automatically push to the network.