That is the real lesson. A Ledger still wants a firmware update and an app install after the seed is in it. It was never fully airgapped. Paper in a safe has fewer moving parts, and none of them have a supply chain.