You're correct. This would be a solid setup for what you described. I'd recommend keeping an offline copy of your wallet config from Nunchuk + phone keys as well just for reliability. Your threat risk would be the combination of any two devices being compromised (plus wallet config if not both phones) or any group of three being lost.