Security measures for BTC spenders

Ok, truth is, most of us probably hodl BTC instead of using it for its intended purpose as a borderless, transparent and p2p payment system.

For the rare gems here who do use it according to Satoshi's vision, what security measures do you take?

My first thought is about having completely separate HODL stack and SPEND stack. Since transactions are transparent and traceable, it would make sense to keep your savings separate from the coins you spend as to not become a target. For the most paranoid of us, even using different exchanges for each usecase could be, imho, a good idea. This lets you spend your sats safely, and allows you to HODL or sell when necessary, without exposing yourself.

This is probably super basic, so what other security measures do you use, or would you suggest?

Edit based on a comment: Using P2P platforms instead of CEX is also a good idea.