You need additional money to buy a hardware wallet.
I've experience held ETH in Metamask for about 3 years, from 2018 until 2021, and never had a problem,
it depends on how you keep it, you only must guard your seed save from online. like me, After creating a wallet in 2018, I closed it, and open it again in 2021.
About bitcoin I never hold it for more than 1 year, I just keep it on electrum, and still save about a year.
It's all safe and never had any problem until the developer turn become a scammer or there's a new virus that can be easily affected in someone device and the fraudster has gain full access on that's device. It's similar I leave my coins on FTX for a year, never had any problem until CZ make a drama and FTX bankrupt. That's why it's better to be safe than sorry because there's no way to correct your past mistake, anyone should learn to buy hardware wallet to secure his coins.