You can't use zcash privately AND securely. Unfortunately, there's no HWW support for shielded addresses yet.
There is:
https://forum.zcashcommunity.com/t/its-here-zashi-keystone-hardware-wallet-integration-for-shielded-zec/49784
Please Login to reply.
Did you test it?
No, I did not get keystone yet, not enough zcash to warranty it, but people say it works.