I'm still messing around with my new Coldcard Q and learning all of it's features. I'm now learning about the 2FA login via SD Card. This is my thoughts for a "final" configuration and would like your thoughts.

24 word seed phrase
Add passphrase
Add micro SD card 2FA and keep that SD card isolated from the SD card I'll use to sign PSBT's
Keeping the device 100% air gapped and will never touch a computer.
I'll essentially be using two SD cards. One that just stores the 2FA file, and another one to handle things like firmware upgrades, and PSBT's

I haven't found much talk or even YT videos on using this 2FA feature with Coldcard, so was curious what others here might say about it.