For your needs, I would recommend a Trezor. Their hardware wallets are fully open source and probably have the most eyes on the code, which means it's safe. You don't even need the latest model.
One problem with not having the latest (or one of the latest) models is the chance the company will drop support for it. We have already seen it with other hardware wallet brands and recently with Trezor as well. Once the Trezor Safe 5 came out, they abandoned the Trezor T. And it's not even their oldest device. You can't buy it from their shop anymore. They will surely still keep it updated with new firmware for some time, but will eventually stop doing that as well.
The next on the list to get retired is surely Trezor One. Trezor Safe 3 is its successor. I own a Trezor One and hope that won't happen soon. End of support doesn't make the device useless and unsafe, though. But it does mean that you won't be able to use new features, future bug fixes, speed updates, etc.