People will say "Oh get this hardware wallet or that one."

What they don't tell you is that, eventually, you will need to replace your hardware wallet. That is because the special component (the security element) that makes your hardware wallet secure will eventually become obsolete and hackable. Cold Card is on Mark 4. Care to guess why Marks 1-3 are obsolete?

My practical advice is to, yes, get a hardware wallet. But practuce using it. Practice wiping it. Practice recovering it from a written or steel backup.

Also look into hardware wallets that can support recovering from a SeedQR code. I think blockstrem's Jade wallet is an interesting alternative to the security-element-oriented approach. And the Jade can be used in a "stateless" mode, where NO INFORMATION is stored on the ddvixe or a remote server -- you just recover from a hand-made SeedQR.