It is a tradeoff. When using secure enclave, you need a second backup keypair in cold storage that needs to be secured.