It seems there best is when you least trust. Most secure would be to create a paper wallet in a secure environment on a dedicated offline machine by using tails but that is too much work for a beginner. Next most secure are DIYs and then all these hardware wallets.