Coinstr is compatible with hardware wallets.

Nostr Connect may also expand to include hardware or air-gapped signing (QR-code only communications) CC: #[3]

Often key loss can be addressed through the spending policy though. You will have a stash wallet or vault that is 2 of 3 of your own hardware wallets for your big stack. Single sig for your day-to-day, and lightning for shopping and zapping.

If a key becomes compromised, the coins can be swept to a new vault with an updated policy that has the new key. (you technically don't 'reset the key', you 'reset the policy')