Coldcard is fine if you generate your own seed but wouldn't call them best in anything. I'd never trust them to generate my seed and personally would only use them in multisignature setups.
Discussion
This is exactly the way I use a mk3
Open source still is the mk4 when they closed it off? Sounds about right
Really? I considered them the gold standard. Curious which options you view as better
I think better depends on your setup. If you're using multisig, which you should, then better is easily a Seedsigner due to cost and open nature of the project but I'd still count a number of devices like Blockstream's Jade still higher. If you're not and using the device as a single signature device while trying to keep the key on device then I'd prefer a Passport. While most of the same security assumptions of Coldcard also apply to Passport, nostr:nprofile1qqsg8k9myvegcelvu2klzvrdh9lr7qnms57chkhjymgpcts09n4dutspzemhxue69uhkummnw3ezumtfd3hh2tnvdakz7qghwaehxw309aux6u3ww4ek2mn0wd68ytn0wfnj7qgmwaehxw309aex2mrp0yhx7unpdenk2urfd3kzuer9wchs3ct77k's dedication to open source and not just source verifiable firmware and the quality of the device's hardware make it an easy pick for a better device.