How hard is it to put your private key and wallet.dat files into encrypted .rar archives with good passwords on a USB drive?

A specialized device like a Ledger is far more likely to be attacked due to its popularity, and you have no way of knowing if the device you bought hasn't already been compromised at the point of manufacturing.