-Signing device airgapped or a hw with USB.
-disconnect all data and hard drives, use Tails OS, use sparrow or electrum, export the xpub, make a psbt, broadcast the tx.