The certificate is for the chip. It does not mean whether the chip is used properly by Ledger, Trezor, etc. It only says “the chip CAN BE secure”, but it is very easy to undermine the chip’s security as the developer.