Both ECDSA and ML-DSA keys are derived on the Ledger secure element via PQ-SLIP. No keys leave the device.