Multisig is the way imo once you are sufficiently advanced, single points of failure are not ideal

It makes it safer to make backups in traditionally "less secure" methods (ie encrypted cloud backups) because even if someone does find one key, you're still safe