List is updated with
KeyStone Hardware wallet that have EAL5+ certification and
32-bit ARM Cortex-M0 secure element, like they announced on their github page with datasheet document.
KeyStone wallet is almost identical with Cobo Vault that stopped with production of their hardware wallet, and main developer with his team created new company with same components and few improvements.
I am not sure this is the best choice for secure elements, as similar cheap Cortex-M0 STM chips are often used as regular processors and not as secure elements, and Keystone is still hiding exact model they are using.
Ledger for example is using non-secure STM32 Cortex-M processor is combination with secure element ST31H320, and other hardware wallets are doing something similar.
Keystone's Secure Element is a 32-bit security microcontroller, which is specifically targeted at low-cost and low-power fields. The Secure Element is an ARM Cortex M0 microcontroller integrated with a variety of secure cryptographic modules, including the SM1, SM2, SM3, SM4 algorithm, as well as RSA/ECC, DES/3DES, AES128, AES192/256, SHA1/256, SHA384/512 and other internationally recognized security algorithms. It supports true random number generation (TNRG). The Secure Element provides a variety of peripheral interfaces: USB2.0 full speed, SPI, UART, ISO7816, I2C, etc. built-in ROSC, and also supports crystal-free applications.
Keystone's Secure Element has a 256K byte on-chip eFlash, 16K bytes of ROM, 16K bytes of on-chip SRAM, and 4K bytes of dedicated SRAM algorithm, of which on-chip ROM provides various algorithm interface programs for developers. It improves the development efficiency and optimizes system performance.
https://github.com/KeystoneHQ/Keystone-developer-documents/blob/main/se/Keystone_Secure_Element_Datasheet.m 
