The only secure option is multi-signature and using different manufacturers. I also don't recommend those setups that use only Bitcoin Core because, while I agree that Bitcoin Core is the most thoroughly reviewed software, you end up relying on a single piece of software and a single point of failure.