Probably jade diy. Or Bitcoin core on air gapped computer. There's no point to ask this question though because you need multisig if you don't trust your device