you can build it from parts you can buy on the internet and download the operating system from the source. this mitigates a potential supply chain attack where the hardware could be tampered with by a malicious actor, as well as the requirement of handing over private information such as your name and address.

there are also coldcards, which are available from coinkite. the dude in charge kinda sucks - but he does make a good product.

jade from blockstream is also fine as well as foundation passport (I think that's what it's called).