With the Ledger fiasco — how do companies / whales manage cold wallets

I’m reconsidering the security of my Ledger and was wondering what folks with large amounts of crypto actually do to keep things secure.

I can’t picture them just having a bunch of Ledgers sitting around.

Do they use a custodial firm?

Use an air gapped computer where they sign everything offline then broadcast on another one?

Use a computer once, enter seed phrase, generate the address, then destroy the device? Really I have no clue.

Though part of me thinks they’re prob no more sophisticated than the folks on this sub.