If only the security issues you consider valid are taken into account, then yeah, only wallets you want to be will be secure. The thing is: there is no "fair" security failure. Any failure can take away your coins.
A cable connected wallet that properly blocks unauthorised data transmission should work as fine as an air-gapped one, as we would only change the medium of transmission. Your PC would only see an unsigned transacion then a signed one. Keys would not leave your hw wallet.