Avoiding Ledger signing devices and safely purchasing signing devices that are legit