use a non-infected device in the first place, (do a secure erase before using it) then you're fine to use your usb even online

you don't need to buy expesive HW like trezor, just be vigilant and don't download random stuff from the web

my hotwallet was never hacked, and i've done with it plenty of transactions