Coldcard is not a solid HWW at all. I work on secure element design and several other people that also do agree.

Don’t use an exchange. SeedSigner so far is the best approach though it needs more code auditing.