For me, what works better is an air-gapped/never touched the internet VM in virtualbox , in which I've installed a downloaded and signature-verified copy of electrum as my cold wallet.

I put the related XPUB in my regular-use/online computer as a watching-only Electrum wallet.

A transaction is pretty easy....create the unsigned tx, put it on a trusted USB and insert to the cold VM...sign it, return it to the watching wallet, and broadcast.

I'm as paranoid as about anyone, so my Electrum wallet connects to my own Electrum Personal Server installed on my own full bitcoind node.

Easy, and secure.


I