The cold card hack exposed the real problem with single-signature Bitcoin. One flaw in one device and the whole stack is gone.
There is a middle option most people never explain properly. A five-key multisig where a custody partner holds one key, you need three signatures to move anything, and nobody, not even them, can stop you moving your Bitcoin. Here is how it works...