Hardware wallets, multi-signature, social recovery — my current understanding of these three is quite rough: if the money is small enough to lose and not be able to sleep over, then don’t turn yourself into an operations engineer; if the money is large enough that “even one wrong transfer hurts,” then hardware wallets should come first, at least to block the daily slips.

Beyond that, if assets start to be dispersed, or if you need to frequently cross-chain/DeFi operations, multi-signature makes more sense — otherwise, a single private key is both a ticket and a noose.
I’m quite conflicted about social recovery; it sounds gentle, but you first need to confirm whether “friends” are another knife, as relationships change can be more troublesome than hackers.

By the way, retail investors complaining daily about validator/MEV ordering unfairness isn’t without reason; in short, on-chain queuing can be front-run, so don’t expect “convenient” signing methods to be foolproof and secure.
Anyway, I now keep the main assets cold and hold a small amount of hot wallets for trading, don’t gamble with yourself.