Multi-vendor geo-distributed multisig is best. Finding all the devices is a tall order vs cracking an SE. After all, they're just signing devices, not "hardware wallets"
Discussion
Why use a HWW then?
You need to store the seed backups somewhere, may as well use SeedSigner with the seeds