> and that (at least from my understanding) are hard to transfer to new devices seems like a risk I'm unwilling to take. It's not really hard. They're quite fl

> and that (at least from my understanding) are hard to transfer to new devices seems like a risk I'm unwilling to take. It's not really hard. They're quite flexible. You can't read the key from them, but you can write to them. You can generate the key outside, write it, save the backup somewhere you trust to be safe according to your threat model, and that's it. If you lose the device, buy a new one, write the key from the backup. The backup can also be used directly if you can't buy a new device for whatever reason. At least, this is how it works when used as an OpenPGP smartcard.