Is there any way to securely generate an ETH public private key pair?

I’d like to move my ETH off the major exchanges but am a bit cautious. As some of you might be aware most if not all mainstream hardware is compromised. All intel and amd processors have a built in back door. That basically rules out the majority of computers from secure use even if you secure every layer above it in the stack. How do you go about generating your eth address securely?

Perform the computations by hand maybe?