singlesig + pw is the ideal for cold storage due to simplicity. I now have a nunchuk + tapsigner setup for my day to day onchain wallet. I think this is the best setup.
Discussion
I agree that this is a great setup for your bitcoin's security. Though Nunchuk can be a bit buggy at times, it's still worth it for the extra security. #[3]
That is the way. LN pocket change, BTC spending wallet, and deep cold. A few setups derisk mistakes.
It really comes down to the determination of the thief.
I would suggest it is silly to store a $3m asset in your home office, no matter what methods you use to secure it.
At some threshold you are putting more valuable things at risk (your family), than the Bitcoin.