In the past few days, we've seen cross-chain bridges fail again, and oracles acting up, with everyone collectively "waiting for confirmation." Basically: don't treat security as some kind of mysticism. Hardware wallets are suitable for most people, especially those with assets still under a few thousand dollars; the rules are simple: don't sign unknown transactions, and avoid connecting to unfamiliar sites. For slightly larger assets or those who frequently need to move funds, I actually prefer multi-signature setups. It’s more complicated, but it can turn a "slip of the hand" into "taking an extra step to stay calm."

I think social recovery is more like a solution for forgetful or device-losing people, provided you truly trust those guardians. Otherwise, it just shifts the risk somewhere else.
Anyway, my current approach is: stay offline when possible, take an extra step when possible, and see how it goes.