You can just use a pixel with graphene OS installed 
Maybe a seed signer In a multi-sig combination

Secure
and it doesn't scream "I'm securing private keys" 

 What a bad advice where do you even pull it from 

 you got a problem with my setup bro 

 @BitBox 

 If you already have one then stick to it