Connect Kit Exploit Sparks Criticism of Ledger's Security Framework