Ledger Donjon hasn't managed to break the MK4 yet, and I guess they have all the nice equipment. Seems like the most secure hww that is currently available imo.
https://www.ledger.com/blog/category/donjon 

 yes, they have, the SE2 used by CC Mk4 is broken (source: Coinkite), and SE1 also has been broken (source: a talk by the Ledger Donjon team) 

 Missed that, sounds interesting, need to watch the talk👀