AEM is a little sketchy though, you need to trust a flash drive to hold it, and make sure that drive doesn’t get overridden by a malicious attacker. Your link goes more into depth about the disadvantages
In other threat models, laptops/tablets/phones could be physically secured in a safe, or kept under direct physical supervision.