I don't know much about hardware but my tinfoil is thick so I just use multisig with different devices and then ignore everything else about hardware 🐸
Buy one coldcard or buy multiple diy devices for same price and do multi-vendor, multi-sig. Which one is more secure for dollars spent? Better yet don't put your whole stack in a single wallet? Yawn