Consider an off-device key storage. Any decent smartcard has physical security no worse than T2, but it will probably cost 100 times less, and it will at least

Consider an off-device key storage. Any decent smartcard has physical security no worse than T2, but it will probably cost 100 times less, and it will at least allow you to chose a long enough password instead of 4 digit pin.