IMHO, to sleep well, it's better to have an air-gapped signing device which has never been connected to internet and seeds was generated offline.
To transact, you use PSBT.
Discussion
What's PSBT? I have a seedsigner and I figure the way to store keys is on paper or in the head. For those who want the dependability of paper and the secrecy of head, a border wallet seems like a brilliant solution. I think I'll be ditching my ledger as soon as I've got all the loose ends worked out.
partially signed Bitcoin transactions