Just setup a good pin and (password 25th word) on the Hardware
Then all you have to worry about is keeping the seed words safe imo