Browser wallets are better than they were, but blind signing still worries me

The standard crypto advice is to use hot wallets for small balances and put large amounts in hardware wallets.

But browser wallets are doing a lot more than signing transactions. Relying on them to simulate transactions, flag suspicious activity, and explain what we're signing. Many pair them with a hardware wallet so the keys never touch the browser, which is how I run mine, currently on Jupiter's.

If you want to level up the security further, you can think of air-gapped hardware wallets and a multisig setup.

Neither air-gapping nor multisig automatically solves blind signing, though. If the hardware wallet can't independently show you what you're authorizing, you're still dependent on the browser wallet UI to interpret the transaction.

So is the old advice of using a hot + cold wallet still relevant, or has the browser wallet layer become the bigger weak point?