1.) Get a VPN and set it to where it's on as soon as the phone turns on.
Hardware wallet are more secure than online wallets, but they are mostly connected to SPV wallet which makes then not private. Just as you can use Tor with other wallets, it can helps in anonymity, not security.
2.) Airplane mode and connect to a secure internet connection
You have your phone on airplane mode, but it can raisky be turned on. To discourage that kind of habit, it is best to remove the WiFi, Bluetooth, NFC and other components that can be used to connect to other devices and to the internet.