Seems like a relevant post to the community here. I like how the author goes into a list of alternatives, with reasoning.

Cross-posted from: https://feddit.nl/post/29675306

I am not the author.

I found this blog to have both a short summary of the reasons as well as a pretty complete overview of the options for protecting against this specific threat model. I can just send this to people and they’ll understand the why and the how.