Some crypto wallets, facing similar concerns but with I suppose higher stakes, will provide the user download a local copy of the software, load offline a private tab, close it when done and only then, go back online again.
A bit fiddly for sure - but seems comprehensive enough.