You can set the security threshold as low as you like, as low as 1 device.
We're exploring research for how we can create policies which would allow for nostr signing with less authorization (m=1) than what you may need to make onchain spends (m=2).
What will you do for the desktop? And If I have to go through a process of plugging in a device just to send zaps and post notes, I would just not do it.