move to cold storage, green wallet or ledger of course and keep the seed words.
but that don't give anyone access to your ledger device.Because multiple customer data leaks happened already. Anyone can find out if you bought a Ledger or not by downloading the leaked database. You should buy it from a trusted 3rd party.
Hardware wallet is the most secure way. If you prefer it a bit more comfortable any decentralized de-fi wallet will be great, the keys are always yours there so the main logic behind *keys are mine* is given in both cases. Also no traces of any purchase of physical device so if you have a secret 2nd phone it will be working good.
The problem is that people's home addresses got leaked ... so now people are afraid of getting robbed / threatened / extorted / etc. There are class action lawsuits against Ledger as a result.The hardware itself is fine, it's just that someone can see that you've bought it.
Well that depends how much this is of your total net worth.
No strong reason to limit transfers to/from the hardware wallet.Now, you also want to avoid transferring from the hardware wallet every day to fund your trades so it's a balance only you know how to find based on your stakes and trading activity.
You're totally right — it's moreso a convenience point that I was making! Basically, transfer enough to your hot wallets so that you don't have to use your hardware wallet "that" often.No strong reason to limit transfers to/from the hardware wallet