All things considered, a relatively simple and highly secure choice is 2-of-3 multisig using different vendors. If you use Sparrow or Nunchuck to make a 2-of-3 with different vendors, it’s super unlikely that any two of them will have an active vulnerability exploited at the same time. I’d still recommend rolling your own seed material, but using multisig with a quorum of independent vendors is even better.