I guess you could create a 2 of 3 multi-sig and then use one of those as your hot wallet and keep the other two keys in cold storage as an option, but otherwise no way around having that node hot and heavy