A cold wallet is arguably the safest option for storing cryptocurrency. However, even with the most secure wallets, there’s no guarantee that users won’t lose their assets.
In my opinion, it all depends on the individual user and their knowledge of the wallet. While a wallet’s security relies on the user’s experience, the setup process must also be taken seriously—from installation through to securing the keys—and should never be overlooked or treated as trivial.
Besides the two points you mentioned, there's another thing to be wary of, or even avoid if it's not absolutely necessary for cold wallets: connecting them to specific platforms, which can generally compromise our personal wallets. While most airdrop players like to connect their wallets to specific websites for the purpose of earning rewards, there are also some who are already very familiar with protecting their cold wallets. When they resume their pursuit of airdrop coins, they often use an empty wallet to prevent unexpected risks.
One thing to keep in mind is that wallets should never be linked to any websites or links. A cold wallet is an offline wallet that is not connected to the internet. This is precisely why cold wallets are considered a highly secure way to store assets.
Airdrop hunters should use a different wallet if a specific airdrop requires them to connect to their wallet, and this is important to note because we never know what might happen behind the scenes to the assets held in that wallet.