Split it:

• Hot wallet — the one connected and used for daily receiving and payouts. Keep just a working balance here.
• Cold storage — a hardware wallet or an offline wallet for the bulk of your funds. It rarely connects to anything, so it's rarely exposed.

Sweep the excess from hot to cold on a schedule that fits you. If your everyday device is ever compromised, the loss is capped at your working balance, not your whole treasury.

Banks keep the vault separate from the cash register for a reason. Same idea — your money, your control.