For anytime that I use a hot wallet to sweep low amount of BTC in any wallet, I have a dedicated old phone that is only used thru wifi.
In other words it’s a dead phone…cleaned out with only the operating software and in my example Mycellium wallet.
I activate only when I want to use the mycelium hot wallet thru my home wifi, so its totally free of any malware or viruses and not used for anything else but this.
I use an old android phone, thats been freshly re-installed. I then make sure im updated to latest OS build, then install a Coinomi apk, and use that to sweep.
I just think, if a fresh device can in some way be corrupted (less a dodgy Coinomi apk), with a smart stealer, within the first and only 5 minutes of internet awareness....we'd all have many more problems to stress over. Feels 'safe' for me.