While secure boot and the other software features might not have defended against this attempt, it highlights the abject failure of the company to even make an attempt at security.
You bring up a good point about bypassing physical tamper detection, but those defenses increase the cost and complexity of the attack, making them harder to succeed undetected. As it is, this attack seemed quite trivial to implement.
> it highlights the abject failure of the company to even make an attempt at security.
Do you know anything about their security model to pass judgement like that? They actually have a quite thorough hardware security model, outlining which components are and aren't considered critical: https://www.ledger.com/ledger-nano-x-bluetooth-security-mode...
> As it is, this attack seemed quite trivial to implement.
Have you looked at the miniature LTE board implant? It's an extremely sophisticated attack against a very sophisticated target, in my view.