Along with above hardware wallet, I think using vmware or virtualbox is a good way.
In a virtual window with a wallet installed, If you do nothing but drive your wallet, I don't think you can be hacked.
You cant be hacked with or without a VM when using a hardware wallet. Its main advantage is isolating the private keys from your computer. So, even if youre infected, there is nothing the malware can do.