Off chain LN is really ment for spending transcations. On-chain is seen as a savings account for cold storage. While hardware wallet does not work for LN, you could use a watchtower, thats where you could use pre-sign transactions to prevent unauthorized usage on your coins. However, you still risk channel closure depending on channel policy.