2-of-3 multi-sig with devices from 3 different vendors (Passport Prime, Trezor Safe 7, Blockstream Jade Plus). Setup with Sparrow, import to Nunchuk. Verify all seed backups. Store all devices in a different geographic location keeping every device away from its own recovery seed. Descriptor stored in all 3 locations. Test transaction (small amount) sent to vault. Test transaction sent from all 3 signer combinations. Send remaining stack to vault. Don't reuse addresses. This may seem like a lot, but I think it's worth the effort to protect my stack.

If your takeaway from this ColdCard debacle is that cold storage is bad and trusting exchanges is good, take a deep breath and really think about what you're saying. Self custody / cold storage is still the best answer.

I just saw your post on X that it was going to be taken down so I had to come provide the same commentary on NOSTR 😂

The dildo would still provide more entropy than ColdCard...