Recently, hardware wallets have been out of stock again, and I had to wait in line several times. I casually thought: security is really not just about "buying a device." When your assets are small, using a hot wallet on your phone + strong password + not clicking random links is enough. The biggest risk is during phishing spikes when you slip up. Once you reach a certain scale (basically, when you're worried "what if I lose it / it gets stolen and I can't sleep"), a hardware wallet is worth the price. But remember not to take photos of your seed phrase or upload it to the cloud.

For larger amounts, multi-signature is more like "breaking the key into several parts and storing them separately," suitable for teams or large long-term holdings—troublesome but secure.
Social recovery is suitable for those afraid of losing their keys, but also think carefully about whether your "friends/guardians" are trustworthy. Don't shift the risk from yourself to personal relationships.
Anyway, choose within your means and don't let anxiety drive you.