Basic cheap pos terminal from Ali express, I’m writing an application for it that doesn’t store any of the keys for BTCPay server instead being provisioned at runtime from BTCPay terminal which is middleware. Basically means it can have permission to create and check invoices, but nothing else. And if the device is stolen, you’ve only lost a device, no secrets or funds.