The best route is to generate your keys with an airgapped device like nostr:nprofile1qqs09jtvjlmyrxjn37zv70a89csegcz7rpyqjmnw29cveedhv7vagqqpz4mhxue69uhk2er9dchxummnw3ezumrpdejqz9rhwden5te0wfjkccte9ejxzmt4wvhxjmcpzpmhxue69uhkummnw3ezuamfdejs92xe5k and keep your keys stored securely stamped into steel or another metal (hint, only the first four letters matter). Keep the order correct! The last two seed words contain checksum so you know if you flubbed it. Its also important to stamp in the 8-character hex checksum for most wallets. Use xpub to create watch-only online wallets to generate btc addresses to send to. Use your offline signing device to send btc out of the wallet. This way your keys never touch the internet.

Be sure to keep your computers and phones in a different room when handling your seedphrase.