For anytime that I use a hot wallet to sweep low amount of BTC in any wallet, I have a dedicated old phone that is only used thru wifi.
In other words it’s a dead phone…cleaned out with only the operating software and in my example Mycellium wallet.
I activate only when I want to use the mycelium hot wallet thru my home wifi, so its totally free of any malware or viruses and not used for anything else but this.