I think there is a lot to be said for the tails option. The way you describe it sounds reasonable (although I wouldn't count on the USB stick lasting very long -- I know that sometimes they can last 5 - 10 years, but I've also had a lot of USB drives crap out on me sooner than this, so I'd try to set up a system persistent storage on a USB isn't necessary).
Good point on the USB stick durability – so keeping a copy/backup may be wise. I don't think I'd want to import the seed fresh from steel every time, also because the physical backup may be elsewhere. If I were going to go that route of importing each time, then a Seed Signer or uninitialised Jade would suffice. But a LUKS-encrypted persistent storage partition on the USB seems like something close enough to what a "secure element" would provide on a HWW.
Good point on the USB stick durability – so keeping a copy/backup may be wise. I don't think I'd want to import the seed fresh from steel every time, also because the physical backup may be elsewhere. If I were going to go that route of importing each time, then a Seed Signer or uninitialised Jade would suffice. But a LUKS-encrypted persistent storage partition on the USB seems like something close enough to what a "secure element" would provide on a HWW.