Multisig with paper and metal backups ( diy metal washers ). Don't ever have all the keys together unless you really need to. This is for the "hold" wallet.

Separate singlesig wallets for cache and spend wallets, backed up on paper and metal.

Hardware devices aren't wallets or backups, they are signing devices.