isolated umbrel running elects sand bitcoin with no other apps

then put the wallet software on a computer running sparrow and you can just drag and drop each new sparrow app onto the UI of sparrow and it will perform the PGP verification

if the keys are off-line on a hardware device, then don't worry about the node in the box being infected