Now days it's really hard to say which one is safe way and which one is not. Everyday Scammers or fraud people get smart. But all i know that if you want to safe your wallet from hackers then firstly safe your privet key. In my opinion yes hardware wallet is the best option to keep your coins/tokens safe. Now days cold wallet is also a good option for coin holders. Doesn't matter what are you choose for your coin double check before you use it.
It is easy to say which ways are definitiely not safe actually.
You just need to eliminate as much risk as possible, whatever the event. And in general that simply means be always wary of what you do online. Always know exactly what site you visit and what it does to your computer. And if possible, access your wallet (storage) as less often as possible.