read this amazing story. It's a huge thrill

https://www.wired.com/story/i-forgot-my-pin-an-epic-tale-of-losing-dollar30000-in-bitcoin/

[now spoilers, in case you haven't read yet]

the point to the story in this thread is, even a hardware wallet can have vulnerabilities. It's still very safe, as the glitch was fixed in the following Trezor update, and anyway it required the hacker to have physical access to the wallet. But they're not perfect.

So you you want to be really paranoid, use 2 wallets from different brands and put half of your coins in each. Since the softwares are independently developed, it's unlikely that both would be compromised at the same time

and use a fireproof safe for the seeds