At the end of the day, you need to keep your keys on an a dedicated air-gapped system where you have epoxied the USB ports and have ideally written the OS and all of the firmware (and the compiler) yourself. But then what's the point of a supposed currency of the future that is barely usable without paranoid security measures?