Recent hardware wallets are out of stock again, and many people in the group are anxiously looking for alternatives.

I instead think it's better to first memorize the most basic red lines:
Don't enter mnemonic phrases into any online-connected input box, don't take photos, don't upload to cloud drives;
If you need to back up, do it honestly by copying two handwritten copies and storing them separately.
As for signing and authorization, don't find it troublesome; if you don't understand, just treat it as "I'm lending out the key," and prefer to click reject.
Phishing links are really annoying during peak periods; people tend to click wrong when anxious.
My current habit is to only access frequently used sites from bookmarks, and treat airdrops/customer private messages as noise.
To put it simply, one less confirmation might mean paying tuition for a few more years.