Seedsigner. Coldwallets that record your key are not a good choice. Non of the cold wallet manufacturers own their full supply chain, meaning they are not chip foundries and even if they were there is always that employee that may be compromised or is angry for some reason. An attack vector is always possible.