content: This attack doesn't even expose existing private keys, either, from what I'm reading. It would allow someone to compromise the Ledger to attack future users, but if you already set your wallet up they'd have to OVERWRITE it to do the attack, making this pretty much worthless in the real world.  And as you say, the benefit here is in people not being able to swipe your private keys remotely by compromising your PC.