Multi sig 3/5 or 2/3

Cold Card

+

Seed Signer

+

Not a Ledger

Vendor diversity + ability to lose 1/3 or 2/5 keys. Descriptor backed up with each key.

Multi-vendor multisig. Any vendor may have a vulnerability. It’s unlikely that two vendors will be exploited at the same time, by the same people.

Get two hardware wallets from different vendors. Use them in a 2-of-2. If you can’t afford two dedicated devices, make a 2-of-2 where one signer is hardware and the other is software with a passphrase. This is still way better than single-vendor single-sig.

If you can swing three devices from three vendors, upgrade to 2-of-3.

I like the idea of nostr:npub1v9qy0ry6uyh36z65pe790qrxfye84ydsgzc877armmwr2l9tpkjsdx9q3h's multi vendor multisig, and I would like to add that it's possible to pull this off with a couple of cheap android phones and Samourai wallet.