I don't use amber, I use a remote signer that's on a separate device. It solely functions as a signer. (It only runs the singer application) That is my use case honestly.

Supply chain attacks and implementation surface area mean it is delta_deps * delta_loc more risky than amber. That's one heuristic anyway.