It is so hard for a newbie to understand the risks. If one buys KYC BTC on, lets say, Coinbase and sends it to a desktop wallet. What are the risks aside from someone physicaly accessing the PC? What are best practices? If you back up your seed phrase on stainless steel or eqivalent and never enter it online, why would you need a hardware wallet?