"shouldn't" is always what the answer will be. The code needs to be open source, then we can confirm "shouldn't" is correct, otherwise ledger should just say "trust us, it shouldn't".

Even if the code was open there are bugs in code that make it a "shouldn't".