I learned something new in the past week: back in the early days of Bitcoin, coins were sent to pubkeys instead of addresses. This makes it impossible to sign offline using an SPV wallet.
Are you sure this applies to
your case? If your funds were just send to a regular Bitcoin address, offline signing with an Electrum-clone is much easier.
I think this one is fake, it should be
https://electroncash.org/ (see
https://bch.info/en/wallets, which came from
https://coinmarketcap.com/currencies/bitcoin-cash/).
I think this is okay.
Note that I wouldn't trust the "official" websites either! Don't risk running that software on your normal computer, Forks were meant to make the creator rich, not you. So keep it offline, and keep it away from your normal system.
BTW, it looks like BCH and BTG can be sent to a Ledger wallet once set up for those coins, but not XEC or BCD
Correct. My advice: get rid of them

I'd gladly provide my services for this (it's been a while).
You forgot
BSV in your list. It's the most annoying one with the shittiest wallet software, but still worth something.
For privacy: if you link any of your addresses together on a Fork-chain, that's basically the same as linking them on the Bitcoin chain. If you're okay with that, you can forget about it.