this is where we plug acceptable hwws in order of least fuckery:
seedsigner
coldcard
foundation
bitbox
trezor
no ledger. ledger ruins lives.