Mainstream manufacturers such as Ledger have introduced Secure Element chips and firmware signature verification mechanisms, but these are predicated on the device not having been tampered with after leaving the factory.