Coldcard, as people are saying. You could get a set of TapSigner NFC cards and set up multisig (with the Coldcard) pretty easily too.