I recommended Coldcard for years. I also owned the worst possible combination: an Mk3 on v4 firmware. My 24 words were one of 4.46 million. A single GPU could have found them in about 3 seconds. Only the passphrase saved me. What I got wrong, and what I'd do differently: https://katakoto.org/coldcard/en/