Typically it's option B. Hardware wallet, although that might be debatable considering the fact that a hardware wallet may not be open-sourced or may be rigged by default... 😵‍💫