Private key should not leave your machine, using it in an extension like a hot wallet is a little better. I've seen there are little ESP32 devices to flash yourself which can be used to sign, will get one and try.