For only holding even a paper wallet would do, as long as it's generated safely.

This being said, you will basically run the HW only once, to generate one seed and get one of the associated addresses (to deposit and see on block explorer).
(At least in theory) the current vulnerabilities don't even matter, since in some more years you may just get a better HW and recover from the seed you've saved/written down from "this" HW.

Conclusion: I'd just go for the cheapest that works with Electrum.




He/she may have been living it own bubble. Less than 600 posts, of which most in Indonesian and Altcoin Bounties. I wouldn't be that surprised.