Good post. But under step 1, you write: “Never take a screenshot, save it to a password manager, or a note in the cloud." This can be interpreted as "screenshot is bad, password manager or cloud is good" I suggest that you make it clearer.

I also think that destroying the old backup is a bad advice. You never know if anyone sends you coins to that wallet in the future. You should instead mark it as compromised.