$boost
The best option is what I do. I use a #Trezor model T with a #bip39 high entropy 256bits+ #passphrase\password. With #SLIP39 Super Shamir, Shamir Secret Sharing.
I store my passphrase\password #online. In a hardened keepass vault. Locked with a master #password and key file. The key file is not kept online. I can access my #keepass vault with many different clients in a matter of seconds. For example, keepass2android.
My #seed backup it's NOT! stored online. This way I can wipe my wallet. Or use it for cold storage and as a spending wallet. In a highly secure and convenient manor.
In other words. I've created my own secure element. One that's fully open source. And highly #trust minimized. I try not to trust anyone or anything. Secure #Elements are a slippery slope. Unless you work for the #government..πΊπ©π§‘ππ¦
Your mileage may vary..π€
P.S. I also use a pin, and bip39 dummy wallets. Sometimes I add multi-sig too..π€