I want to add to this the 12/24 words are not just your backup. They ARE your wallet. Anyone who has access to them, has access to your BTC.

Also, you may not have access to a Hardware wallet. But you can technically turn an old phone to a cold wallet, by ensuring it remains offline and you never connect it to anything. But of course these are as secure, but slightly more secure than a hot wallet.