You have outlined some vital points here to help Bitcoin investors keep their Bitcoin asset safe. We hear of Bitcoin scam very often, but the reason why many are scammed is because they don't adhere to these safety rules. When your wallet is connected to the Internet, what else do you expect. We exclaim that we have been attacked by scammers, but the truth remains, we don't do the needful to protect our own wallet or asset. When your information is offline, there is no way your wallet an be attacked from the Internet because there is no room for that. Furthermore, if you keep your wallet information away from online, also try to be secretive offline because you can be attacked from both ends of really you cannot be conservative to your investment.
Well, what I share is not different from what big players and exchanges do to protect their massive amount of assets. Doing the same thing will protect you from any attacks online.
Before, my way of protecting my BTC was to use only a traditional wallet like Electrum with AV, but nowadays it is different since hackers are also adapting and developing. That is why I also adapt to how to protect my wallet. The first one is the cold storage, which, for me, is a must because you already remove hackers to reach your wallet online but not from a physical attack. To improve your security against any physical attack, a multisig is a must; the one should always be in your hands. At least if they possess your wallet physically, they can't make any transaction without the other signature, and the passphrase also helps to protect your wallet from seed brute-force attacks, so even if they had the backup seed phrase, they can't find where your funds is.
All that I share is a huge security wall that can't be easily broken unless the whole Bitcoin system is being hacked.