I like to have a machine with an OS I trust that never touch internet, then create wallets that I check “watch only” for spending I sign from a virtual machine and not big quantities per wallet. There’s plenty of solutions, for btc I really like many passphrses for the same seed