For now just assume they're not very secure

there's really no good devices out there that can perform the operations needed

you can pick a vendor and just trust them

For example you can choose Alby or something

It's the best we have for now