Best Bitcoin Core Version for Cold Wallet Setup?

Basically, yeah. Your master private key from that tool would be the BIP32 Root Key.

Always verify, that’s a must. Thanks for that. Does the Core Client warn if there’s not enough entropy when generating a seed?

Good question. It reads from /dev/random and /dev/urandom, but you’re on embedded hardware with low input, that could be tricky.