Lately, everyone has been talking about social mining and fan tokens, the "attention is mining" approach.

I'm actually more worried about this: the hotter the attention, the easier the wallet is to be targeted...
Let's fix the private key issue first.

To put it simply, if your asset size is just small daily pocket money, hardware wallets + clear backups are enough.
Don't turn yourself into a "multi-signature administrator" and forget the recovery steps.
When your assets grow to a medium size, I prefer multi-signature, even if it's more troublesome—at least it separates "slip of the hand / getting hacked" from a single point of failure.
But multi-signature has its own simple pitfalls—participants, devices, processes—if one link fails, everything stalls.
As for social recovery, it's suitable for those you truly trust and are willing to rehearse with in advance.
No practice means no setup; in a critical moment, heat of the moment can cause a crash.

The same applies to trading: don't think about beating fear, practice not to be impulsive first—
I'd rather slowly place orders and miss out than use market orders and hand my heartbeat over to slippage.
That's it for now.