SlowMist's Cosine: Signature information is collected by default; Ledger's Clear Signing mechanism resides in the SDK rather than the firmware

Odaily reports: SlowMist's Cosine posted on X that Ledger's Clear Signing mechanism by default collects the network or chain ID, destination address, device model, firmware version, app version, and whether blind signing was used and the reason for it at the time of user signing. This privacy collection mechanism resides in Ledger SDK's context-module v1.16 and later versions, not within the Ledger firmware.