The only #Bitcoin hardware wallet not susceptible to physical key extraction is the Blockstream Jade.

Jade uses a virtual secure element (blind oracle) so your seed is not stored on the device. You can also set up your own blind oracle or run it stateless with SeedQR (like a SeedSigner).

By not having a physical secure element, Jade can remain fully open-source and easily DIY-able.

You can read more here:

https://help.blockstream.com/hc/en-us/articles/15884462476953