With a hardware wallet like coldcard or passport that is not connected to the internet.

Or

With phone disconnected from internet.

https://sparrowwallet.com/docs/best-practices.html