What about bitaddress.org as a paper wallet generator.
I've never read anything bad about them. But there are phishing sites out there, so a typo could be costly.
This time, of course, I will generate the wallet offline.
If the code on the site is compromised, that doesn't help you.
Is this still asking for trouble or should I stick to hardware like ledger?
As much as I don't like Ledger, it's still a better choice.