Help me on single Cold Card peasant security

So I have Mk4 and I'm exploring options to upgrade my security from a simple Wasabi desktop wallet.
I decided I will not go for multi-hardware devices or hosting provider.

The two options I see are single sig + passphrase,

Second option is hidden hww, hidden key 1, many copies and still somewhat hidden of key 2.

I know the two methods can overlap but I would love some feedback, here's what I can do.

I have family member in another country, I'm convinced I'll utilize this lever and this is the first dive I'm doing and wish to get mentally comfortable first.

Any feedback, opinions, suggestions, anything really is massively welcomed, please and thank you.