One simple guiding principle is to build your security around the idea that your stack is worth 10x what it currently is, so you future proof your setup

If you do multisig I highly recommend different manufacturers and a well-generated 25th word