You can do both(cold wallet using privacy of own full node) by using xpubs.