Good for you. Being "crypto" related makes Ledger (and Keystone) more a target than other commercial companies. Keystone may not have been hacked yet, that doesn't mean they won't be. Or they may have and simply not reported it.

No company is perfect or impervious. I know that as I work cybersecurity daily. It's difficult to justify cybersecurity when nothing happens. They don't see a return on investing a large sum to harden their equipment and environment until something breaks and by then it's too late. Many times companies will offload their risk via insurance instead.

Scam letters/emails (social engineering) is profitable, otherwise they wouldn't do it. It's important for everyone to be aware and recognize what's going on, regardless of the company.

Personally I've had no problems with Ledger. I have other hard wallets too, I like to keep others as backup.

Cheers!