Use a non-custodial wallet, a wallet that pretty much only YOU has control over.
That's correct, using custodial (centralized) wallets is too risky as they have control over your private data. 2-of-3 multisig is a minimum security level you should have in a cold wallet.