My favourite is Ledger Nano, but it has some problems with memory (you can't keep a lot of apps installed there).
I wouldn't call it a *problem*, rather a inconvenience. That was probably intentional in order to: a) Sell Gen 2. b) Cut production costs.I mean to boot from Linux LiveCD and download wallet from cloud, then make a transaction.
This strategy minimizes risk of trojan malware that you have caught somewhere.
Trojan =/= malware. Trojan's are a subset of malware. Either way, while being beneficial to security, that does not guarantee anything. This strategy minimizes risk of trojan malware that you have caught somewhere.
How does cloud service owner will use rubber-hose cryptanalysis?! Very interesting...! 
Upload to the cloud = upload to your nearest intelligence agency. They will know what to do. 