Ive often thought a decent argument for keeping keys on a google pixel running graphene that you simply never turn online. Can keep keys in blue wallet + passphrase and use your daily driver phone to broadcast the transaction. Wouldnt be suspicious, pretty good security.