There is not a solution that fits all the scenarios.
IMO, a hardware wallet with a passphrase is a good solution. Also you can have some SATs protected only with the seed and not the passphrase for a wrench attack scenario.
If the amount of SATs is big, maybe consider to have another device (different seeds) with the same set up.
Black up your seeds in metal and also in two different locations.