But aren't paper wallets vulnerable to malware?
Not if you generate and spend them securely.
Especially the unencrypted ones?
They are more vulnerable to physical theft. Else, their risk from malware is the same, unencrypted or not.
Unless maybe you have a special multi-key paper wallet, but for that you would have to find a reliable and qualitative generator of mnemonic code. Quite apart from the fact that the printer can be unsecure and have an internal storage, which might be hacked.
It's not hard to create a multisig with paper wallets. Spending them will be a hassle however.
Generally, its quite hard for printers to be hacked if they aren't connected to the internet. If you're scared of side channel attacks (pretty infeasible), then cover it with a tinfoil and do it in an isolated room.