ERC20 and non-ERC20 Wallet Security

I'm looking for some signal to cut the noise, since most guides, blogs and articles are trying to push some arbitrary choice of wallet. So please, reply on the basis of your own experience and if possible on the basis of trusted information.

To store BTC most people know how to setup a secure cold wallet. For ETH and ERC20 my understanding is that MEW can be used to create a cold wallet too.

Please do not submit plain superficial answers suggesting a random wallet like Exodus or Trust. If you do use something like that, please state what are the specifics of creating a safe environment around it.

Please consider that I (and most people seriously talking about security and privacy) can run Tails, Qubes, Tor and other security measures if required.

Due to country restrictions acquiring hardware with Secureboot/Heads is not an option right now. A hardware wallet is not an option right now, due to the same reason, unless there is a safe DIY solution.

Questions are:

• For non ERC20 tokens, what safe wallet do you use/recommend?
• Your suggestion allows for the creation of a cold wallet?
• If hot only, why choosing it and what key security measures are you using?
• For ERC20 tokens, do you use/recommend anything beyond MEW for cold storage?
• If not, are you using hot wallets for ERC20 and ETH? Why choosing it and what key security measures are you using?

Do your own research.

That's what I'm doing Einstein, this is just another good place to gather information.

Sorry if anything came out rude, I'm trying to be objective and the community deserves better than random blog posts and HODL memes.

If ever I'm satisfied with security architecture and wallet choice for people stuck in similar situation, I'll update the topic with all relevant information.

Cheers!