Excellent summary. Thank you for sharing. In conclusion, the only secure option is self-custody using a device you’ve built yourself.
Seed phrase, robust passphrase, multi-signature.