> never let anyone have your private key. No-one who religiously followed that rule has ever had their crypto stolen.

Bullshit. No "religious" following of rules can protect you against a zero day exploit somewhere in your system.