if you don't fully trust your hardware wallet, you could try multisig with multiple wallets of different vendors. also see BLS signatures.

Ethereum is much better in these scenarios.