I'm reluctant to put too much trust into one hardware wallet.

You can use multisig with multiple hardware wallets but then you lose some privacy onchain.

You could also use a multisig taproot setup for better privacy, but then there's a risk with quantum computers approaching.