Single device should NOT be the single signer for any meaningful amount of money

Hmm I saw this exact text elsewhere yesterday. It sounds smart. Until someone needs to figure out multisig. Sees a "multisig manager" app on the same app store and it just replaces recipients in a psbt before signing.

Then what's the next word of caution gonna be? Never use apps.

Fine, so we buy a hardware wallet that we don't understand. Problem solved. Right?

Oh wait no now we need 3 hardware wallets.