1. Coldcard; Airgapped and great support materials. 2. Jade; Airgapped and when coupled with qr seeds, hardware doesn't hold any private keys so if you lose it, no big deal. It is a pain to upgrade though. Takes me several attempts. When it works though, its great. However the signing devices are useless if you can't audit your entropy. That's why anyone with a substantial stack should be using https://www.rudefox.io/burrow/. Created by '@bjdweck' on twitter, it's a system you can use to manually verify the dice roll using an airgapped computer.