If you decide to go with a double action auto (erring more on the side of safety than you would with a Glock type trigger action), you should avoid those with thumb safeties. You just want a decocker. Sig and CZ make them with just the decocker, and Beretta offers models with just decockers too.

Here's the reason: Many say "just ignor the safety and only use the decocker," but you cannot risk the possibility of the safety becoming inadvertently engaged, so you will have to train to sweep it off every time you raise it to fire. Now you're in the same boat you'd be in with a single action auto, but with a less intuitively designed thumb safety than is typical on single actions.