Signing a PSBT by QR code is the equivalent of using a new SD card each time you sign a transaction.

NFC is a no go for the paranoid either.