paper wallet generation software can also have bugs or be intentionally rigged and people have definitely reported both quite a bit.

You're right on with your approach -- I think the answer is multiple wallets -- even multiple brands of hardware wallets, multiple exchanges, multiple computers, multiple different types of paper wallets stored in different places, even multiple cryptocurrencies in case one has a catastrophic issue.