I don’t want my wallet to be drained…

I've read probably 20 posts within the past 3 days if people losing it all (usually from their hot wallets but some from their hard wallets). Yes, some people admit to doing some dumb things, but others claim they did everything in their power to protect their money and still getting drained..

I'm honestly wondering if keeping your funds safe in the long-run is actually possible or if pretty much the majority of people eventually gets burned. What do I need to do to keep my funds safe?

The riskiest thing I do is interact with a few dApps/Dexes, which I know may end up burning me. I only access crypto websites via Coingecko links. My seed phrase is only written down. I'm paying for a VPN. I use a password for my wallet (though this doesn't matter if your seed phrase is compromised). I've ran two different antivirus scans with nothing. I do get sus 0.000001 SOL deposits to my wallets (dusting from I learned).

I'm thinking of wiping my computer clean and creating new wallets, emails, and buying a hardware wallet. But, I still worry that no matter what, I'll be compromised. At this rate, I feel like I should just buy the top 10 coins and store them on a CEX. Idk. Thoughts? Thanks for listening to my venting