I'd start with Green wallet and setup a multisig account since it acts like a multisig without a hardware wallet. Definitely go with a 2fa authenticator instead of email or SMS and use Tor for privacy