Comes down to your specific wants and needs.

while walletscrutiny.com is a good starting resource for software reproducibility, to my knowledge there isnt one for hardware vs licenses and the features available.

i will continue to use coldcard as its affordable and no other devices offer its full feature set. yet.

if you dont need remote access as a HSM like coldcard offers when paired with ckbunker (99.9% of users dont), then consider the following:

- blockstream jade (simple device but unless setting up your own server for login to use it requires the blockstream server. sealed, MIT)

- trezor (open, but no secure element and private key retained on device. must use passphrase, sealed, MIT)

- seedsigner (open source software on top of general purpose hardware you acquire and assemble where chipset is neither open nor source available, must physically secure, unsealed, MIT)

- foundation devices passport (initially modeled after coldcard, catalyst for nvk license change, it offers the essentials for most use cases and improved privacy support with whirlpool, sealed, Apache/BSD/GPL/MIT)

sealed = physically sealed, tamper evident