The most common recommendation nowadays is to just get a hardware wallet. Which in my opinion offer an excellent combination of security and usability. They are fairly idiot-safe, so to speak 
they also need backups.and can be hacked (private key extracted) once the attacker gets his hands in the physical device itself.