I would agree that the best practice is to keep your wallet on media not connected to the internet for routine storage (and have backups)