pi zero 2W or esp32 lily2go are best ones after dedicated agent is tested on main linux box first
zero risk of hack or loss of data except keys
if kept isolated dedicated per task