I'm happy in the middle, I use a dedicated VM on a host that does run other things.  Most of my stack is in a multisig with 2 airgapped keys anyway, and #sparrow is really good at showing you what's being broadcast.