If itnneeds USB it’s a no no for me. Only air gapped HW is what I usually recommend. Coldcard os a good choice but I like Seedsigner also