I'm curious: can you run a Bitbox02 signer to sign on a computer which itself is airgapped? I get dark skippy makes the direct airgap an issue, but curious if the additional device being airgapped may let you have your cake and eat it too.

I'll have to look more into this. It may turn this into an acceptable option after all.

Multisig can also be a good mitigation but multi device single sig isn't something we usually consider.