https://shop.nitrokey.com/shop/product/nitrowall-nw678-480

OPNsense or OpenWrt. VPN.

Can customize hardware. Can be sent in tamper-evident packaging. Can be bought with Bitcoin.