The Ledger debacle that caused the leak of customer information (down to their home addresses) is making me hesitant in purchasing a hardware wallet. There is ColdCard that claims they only hold customer information for tax reasons and then they delete it, but I'm not convinced. It only takes a bad actor within the company. Should I go for a paper wallet instead? What is the proper procedure in creating one? For what it's worth, I'm not going to transact at all except stack sats when I can and hold them for the long-run, maybe for the day I'll be able to purchase my morning coffee with it. 

I've found this resource, is this proper procedure? The guide is incomplete though as it doesn't say how to generate the address from the mnemonic. Could someone fill in the rest?
https://bitcoinmagazine.com/culture/diy-bitcoin-private-key-project

Or is Tails OS/Electrum preferred?
https://www.youtube.com/watch?v=yzJ9bRFkwmo