I prefer a permanently airgapped and computer with full disk encryption for the bulk of my cold storage. I transfer transactions back and forth using QR codes, using two separate webcams which are unplugged immediately after use, therefore eliminating any concerns regarding transferring malware or malicious code via a USB drive. The computer is stripped of all unnecessary hardware, only runs a basic open source OS and my bitcoin wallet and no other software, does not share peripherals with any other device, is stored in a safe in my house when not in use, and is only used in a room with curtains closed.
I have a small laptop that use in the same way. I recently updated it with Ubuntu Desktop 20.04.2 minimal install, Ian Coleman's Bip39 tool, and Electrum. That's all that's I have installed on it. I haven't physically disabled the network adaptors and USB ports. I like to keep the software updated, so I plan to use the hardware from time to time for easier upgrades. Once the machine is set up the way I like it I disable the NIC and USB devices using the bios settings, which are also password protected. The wifi adaptor is always disabled, I only use a wired connection when updating a newly installed OS.
I also use an encrypted USB as a redundant back up for all my seeds. I store the seeds in an encrypted text file, and the USB stick is one of those aluminum enchased Corsair Survivor sticks. Am using bitlocker for encryption, which is probably not the best thing since all my other devices are using open source OSs and software. Since my data is PGP encrypted anyway, I don't think it's that big of a risk. Of course I have my seeds backed up on paper and stainless steel, stored in a fire resistant document bag, in a fire resistant steel safe. It's just nice to have them available electronically when I restore cold wallets on my off-line machine.