If Air-Gap cold-storage setup isn't an option, you can consider 2FA Electrum which is categorically safe.
It requires a 2FA device which should be your phone with Authenticator app and (third-party) additional service fee for the 2FA service.
As long as you keep your seed phrase safe and generated it offline, your wallet will be safe even if the computer/wallet gets hacked.

For security reasons, you must read and follow the suggestion in Electrum's 2FA wallet setup wizard:

Image from: electrum.readthedocs.io/en/latest/2fa.html