I need to do more research. I’d like to have more diversity in the whole stack. But you can clone two CC MK4’s for redundancy for about the same price plus your SD cards, and have two identical units that can sign on the same set of addresses, but are in two separate offsite locations, so you never have immediate signing capability at home. Ideally I think one offsite lockable location with video surveillance and one offsite lockable location like a small fire safe that’s in the possession of an armed friend with a safe word to let him know you’re coming to his place under duress. It’s a pain in the ass when you want to sign transactions or update firmware, but that’s the point. Onchain transactions should be minimal anyway aside from UTXO consolidations. But ideally any attacker would never even get a chance to find out all your stuff is offsite cause they’d be pepper sprayed and full of buckshot or the focus of an armed standoff with LE before they found out. Having a border wallet address that you can sweep to is good, as long as you delete the db file off your software. You can access it and sweep it back later. A redundant offsite Linux laptop with the OS loaded on an encrypted volume is a good idea.