A "consumer laptop" is basically a hot wallet, which by definition shouldn't be considered safe. The moment you find out it's no longer safe, your coins are gone already. Ledger devices are even worse nowadays, they're hot wallets that broadcast their seed over the internet.

So out of those 2 options, I'd pick #3: a Trezor Safe 3.