I had friends reach out this week with the same question. The Bitkey ($150) is kind of pricey but it is what I recommended since it's easy to sign in and no seed phrase needed for the less tech savvy. But the Trezor Safe 3 looks like a good one as well and I think what they are choosing.