"Hardware wallets" made sense when Bitcoin was niche. Now Foundation, Keystone, Coldcard, and Ledger have all been compromised. Some point to SeedSigner as the answer. Stateless, air gapped, QR in, QR out, keys only in RAM. But you don't need to build one at Micro Center. Take an old ThinkPad, rip out the Wi-Fi card, unplug the Ethernet. Same air gap, and a machine security researchers have audited for decades instead of a bootloader nobody's ever touched.
The missing piece is air gapped signing software simple enough for an everyday Bitcoiner.