I guess that software wallet in linux VM without internet (only when sending) is still and option. If you use it as cold wallet you may not send anytinhg in years