I think it's time we finally move to generating and storing secret keys on secure elements (Yubikey, NitroKey). This way we only need to worry about the physical security of the key and nothing else.
No air-gapped machine and a random flash memory stick (for storing the backup of the private key) can be considered as secure as the secure element.
No air-gapped machine and a random flash memory stick (for storing the backup of the private key) can be considered as secure as the secure element.