If you have a significant amount of bitcoin that would hurt to lose, look at a service like nunchuck.io #nunchuk. Also look @SeedSigner for complete true open source signing device to add to your coldcard multisign setup. trezor and bitbox can #gfy (with all due respect to @BitBox)