I always thought an HSM verision of Amber would be a great not too intrusive or complex solution.
Params like
-Phone/client pairing secret =sign
-Only sign whitelisted Npub messages.
-Kinds[1-?] Auto sign, else return confirm message with new kind param.