A hardware wallet is definitely the best solution for keeping your crypto safe and not vulnerable. Of course, you need to keep in mind that you'll need a wallet every time you want to send a transaction.

Also, I would consider buying a pair. If you lose one, you can always restore on the other one almost immediately, and not wait for another wallet to arrive for a week.

Considering the choice – I have a Trezor. I like it for design and integrated password manager — you can store some private keys from other wallets there.

Good luck.