ColdCard (air gapped) preferably running your own node is the way to go.
Ledger is closed source.
Trezor has been physically hacked.
ColdCard will be releasing the Q1 in the upcoming months which looks great too 🤙
Discussion
Or build your own seedsigner or go for ShiftCrypto Bitbox02
+1 for seed signer. It always slips my mind when recommending cold wallets.
Not a huge fan of it due to concerns about requiring their native software installed to work properly with Sparrow, Electrum etc.
It depends. It is the most secure option for long term storage.
For transactions I personally use the Bitbox. More comfortable than Coldcard and at least as secure.