1. There's endless possibilty of good and strong password, but never neglected that hacker being an a##hole never stop them to steal your things digitally.
2. For 2 FA , i preferable authy beside normal GA, since authy more convenient to use and have backup solution which using your phone numbers or mail
3. This one is the main attack of many hackers, since wallet got installed to this device. For suggestion i've got something better which using ledger or nanos. If u want to try it, then check them out before u want to buy it.
4. Just kindly remind that u need backup for yourself, which will help u later just in case u forgot something or password ( i ve made many backup hidden in my house..LOL ) .

And i want to add something just to remind about wallet. Do backup your wallet befero u transfer it to your address, give them good enough password to protect and never follow someone who asking u  to typing something on console screen. I've meet person who asking for help on internet and give them access remotely on screen only. But that doesn't stop hackers to get what they want, which is very important. Yes..private key .. thank god he only give them address which have no bitcoin there.