Recently helping a friend set up a wallet, I found that everyone is as conflicted about "hardware/multisig/social recovery" as they are about looking at modular chains and the DAO layer: developers look excited, users look confused... It really just depends on your asset size and how much "operational complexity" you're willing to accept.

For small amounts, it's about convenience: just use a mobile wallet + backups, don’t make the process as complicated as deploying to a production environment. For assets that you’d really regret losing: hardware wallets are quite good, at least they keep signatures away from online environments. Going further up, especially if you're not managing the funds alone or are genuinely worried about slipping up or being phished one day: multisig is more like "risk control," troublesome but can eliminate single points of failure. I think social recovery is suitable for "people who are afraid of losing their seed phrase but don’t want to set up multisig," but only if you trust those recovery contacts and they’re not too incompetent...

What I’ve learned isn’t techniques, but rather: don’t design security solutions based on an imagined version of yourself, but based on your current self (lazy or not, stable or not, whether you have teammates).