Well, she was actually committing a crime. I'm just buying and holding my BTC in OWNR wallet and it's not illegal in my country, so I'll be fine.
For holding you should have a dedicated air-gapped machine that's fully encrypted and using only official wallet software for accessing it - in terms of BTC - Bitcoin Core wallet.
Other than that, sooner or later you'll get hacked.