#coldcard is my single favorite, BUT if and when you graduate to multisig storage I think it’s best practice to use hardware wallets from multiple good vendors, e.g. ColdCard Mk4 or Q / Trezor T or Safe 3 / Blocksteam Jade in a 2 of 3 quorum. Looks like you’re off to the best possible start.