Yeah this has been going on for a while now. Don't buy a second hand ledger, or if you do, then make sure to do a complete factory reset on it which resets the passphrase.
