I would say the safest way to sweep them would be to use a trusted android wallet if online, or do offline transaction signing on an air gapped PC, as android if unrooted is much less likely to be compromised than a PC running windows thats online.

I know there is a lot of stigma on android wallets like coinomi, but if you have safely backed up the seed, its much less likely to be compromised than a PC running windows, by far.

Once swept, move the funds to a hardware wallet.