Maybe a physical notebook. Still infinity better than increasing your threat surface by a third party holding a bunch of keys that might be encrypted well.
Let's try it this way. I'll use a third party if they indemnify me. You screw up, you pay me?