Nah we just need to give up the fantasy that you can be sure a computer isn't compromised.

Hardware all the way.

I have my pgp key on a yubikey, my crypto on a ledger. My passwords on a mooltipass.

There are few mistakes I could make leading to this kind of compromise. Perhaps none!