Yeah never ever keep crypto in an exchange, you never have the private keys.
Dedicated Laptop for keeping wallets, make sure you can physically toggle the wifi like on lenovo laptops, only go online when doing a transaction. Hosting your own wallet is the best thing if you are careful. Electrum is my choice, but it requires a little bit of math on the fly to do transactions.
Cold storage is also an option via a printed paper wallet. Also be sure to take the right procedure to do this such as grabbing the private keys so the never go public, and only using it once to withdraw...
Hardware wallets are popular as well but I am skeptical. Most user friendly though, take it with a grain of salt.
If you are using a broker then secure your 2FA by using a dedicated phone for that as well, and making to sure to place a lock on your carrier so you can't get SIM swapped. Set No notifications without unlock on the phone....
it starts to get complicated when you carry a bunch of different altcoins. But BTC is pretty easy.
If you want to have a flow to convert BTC into spendable debit card, In the US Cashapp is actually great for this. You can send BTC to cashapp, sell it and have it immediately on the card, low fees too.