I think the best options now are Blockstream Jade and BitBox (maybe for other cryptos) because they have firmware fully open source.