Recently, I saw someone discuss which is more stable: hardware wallets/multisig/social recovery.

Actually, it all comes down to how much you can afford to lose and whether you can stick to the process.
For small funds, I think a hardware wallet is enough—don't take photos of your seed phrase, don't store it on the cloud, and don't keep plugging into random computers all the time.
Once your assets reach a level that keeps you awake at night, multisig is really appealing, but it’s also genuinely troublesome: devices, permissions, people, emergency procedures all need to be rehearsed in advance, or you'll just end up screenshotting and asking for help when something goes wrong.
My attitude toward social recovery is: it’s suitable for those who don’t want to memorize 12/24 words but can find reliable “guardians.”
If the guardians are unreliable, it’s basically outsourcing your risk.

By the way, recently, before and after the main public chain upgrades/maintenance, everyone in the group was guessing whether projects would migrate.
I actually pay more attention to whether the wallet and signing permissions are being adjusted—before the chain is migrated, don’t let your assets get transferred away first…
My current setup: daily use hardware, multi-signature for my small vault, I prefer to be a bit slower.