Buy from a no-KYC reseller. Catch me in person at Nashville coference for a KYC free Cold Card Mk4. Tamper proof bags intact. Recompile and flash your own firmware.

Be physically prepared to defend your device if that's your threat model. Physcial readiness is step one to self-sovereignty. 
nostr:nevent1qqsp44uvkcrqnzwzhawe9q9kqf8pkg2zucqps5lfe4vx8ct0ttleapgpz4mhxue69uhkummnw3ezummcw3ezuer9wchsygzscm8zu6w0pwhhndfy3zeqgxxy5muu577s43j5k33y6hqztn6hmvpsgqqqqqqsexuj67