Seems like you’d want a lightning wallet with an easy loop out setup to cold storage or least an inaccessible hot wallet. Otherwise, not much stopping thugs from demanding they hand over their phones/passwords.