If you go with Comodo, DigiCert, Sectigo, etc, they all require you use a hardware license dongle. Also signing for AAX requires a dongle (iLok).

One can also use cloud HSM like Azure.

To keep my Software Code safe, I have been using an Individual Code Signing certificate for the last two years from signmycode.com.