The references to a hardware wallet being made here are not incompatible with using Metamask. The hardware device will be the one that actually signs your TXs, and will physically need to be connected to do so, thus mitigating the chances of certain hacks taking place.