I use an air gapped Linux machine for this, while I own a few hardware wallets, I still don't trust them (neither does the smartest man I know) - "it's another link in the chain that can be compromised". I wish it weren't this way, I'd prefer to use the hardware wallets. Talk some sense into us, tell me why I shouldn't be scared.