If you keep it from ever connecting to the internet and just buy a highly trusted and long running device, then the keys are generated entirely off your mobile. apps can very easily steal a key because its always connecting to some distant server somewhere. A hardware wallet, with a few basic considerations, is much easier to trust and use safely.