[deweller]

Hardware wallets are a good compromise here. Sure, you need to trust the hardware vendor. But the attack surface for a hardware wallet is way smaller than with a big OS.

There are much bigger attack vectors than the operating system vendor. Even using with a FOSS OS, you are susceptible to viruses or other attacks not initiated by the OS vendor.

Use a hardware wallet or cold storage. Use a multi-sig wallet for corporate-sized quantities.

Holding your own BTC is not simple but there are good solutions. Be safe out there.