Ideal:
Hodl amounts:

• Seed generated randomly with dice, using SeedSigner or Coldcard offline to generate it from your dice. Add a passphrase.
• Generate an xpub/ypub/zpub from these, which you can use to add funds in a way that doesn't expose the secrets.
• Store the secrets (seed and passphrase) in a secure place using engravings in metal (maybe washers attached to a screw, or plates).

Spendings / amounts you can't stand to lose

• any hardware wallets are fine for that purpose
• lower risk having the seeds still on the device
• can still use passphrases and other security methods
• Lightning wallets are for excellent even lesser amounts