Trezor with passphrase. All HW wallets can likely be cracked if found anyway, so the extra passphrase is important.