Recently, hardware wallets have been out of stock again, and many people in the group are anxiously looking for alternatives. I instead think it's more important to first remember the basic red lines: never enter seed phrases into any online-connected input box, don't take photos, and don't upload to cloud storage; if you need to back up, do it honestly by writing two copies by hand and storing them separately. Don't find signing and authorization procedures troublesome; if you don't understand, just treat it as "I'm lending out my keys," and prefer to click reject. Phishing links are really annoying during high incidence periods; people tend to click wrong when in a hurry. My current habit is to only access frequently used sites from bookmarks, and treat airdrops or customer service private messages as noise. To put it simply, one less confirmation might mean paying a few more years of tuition.