Use Bitcoin only companies when you get started such as Strike, river financial or cashapp. Even if these are better options than scammy platforms- Bitcoin is not yours until you withdraw it to your own private wallet.

Hardware wallets are Blockstream Jade and Coldcard. Or for advanced users you can have similar security using the software correctly: https://darthcoin.substack.com/p/build-your-hodl-btc-cold-wallet