Coldcard is not a solid HWW at all. I work on secure element design and several other people that also do agree. Don’t use an exchange. SeedSigner so far is the best approach though it needs more code auditing.