MultiSig wallets are a thing. You do not need to lose all your funds to a single device hack, contract exploit or even seed stolen

First let's go over what a multisig wallet it. Typically, to perform a transaction a single private key(think of it as a wallet for simplicity) is needed to 'approve' of the transaction. Consider having Metamask on your phone. You would 'approve' of a transaction simply by using that single Metamask account with everything done through your phone. However, you can also use a multisig where transaction require the 'approval' of multiple private keys(/wallets).

You may have keys stored on your phone. And another set of keys on your PC. Whenever you want to do a transaction you would need to approve of it from your PC as well as your phone for it to be successful. Of course, it is a bit more cumbersome, but it is a much more secure way to protect your funds. If one of your devices is hacked or stolen, your funds still stay safe. The seed for one of the keys can also be stolen, but your funds will still be safe. Both or all of the seeds would need to be stolen, which can easily be mitigated by splitting seed storage locations. It also gives time for you to become aware of the steal and take measures to relocate funds like to a new wallet if necessary.

I think this is a major oversight by many as it is a simple way to protect your funds much more securely. It even helps protect against many smart contract exploits because of the requirement of multiple 'approvals'.