This completely talks past what the person you're replying to is saying: it doesn't matter if "hardware based security is [...] the only way," because its conspicuous absence indicates that even the experts fail to meet the onerous requirements placed on them by cryptocurrency.
Yeah, this only highlights how ridiculous the requirements are.
The system needs to be tolerant of failures and faults of multiple natures. And cryptocurrency is very intolerant or many types of failures and faults.
I would assume that if you are a major player in the bitcoin world, you should do complicated things to secure yourself.
Its sort of like if someone wins the lottery, and tells the world they are putting the money under their mattress in their home. Its not unreasonable to say that such a person faces more risk than an ordinary person and should install an alarm system or something.
You would assume. But, empirically, users don't - even users who should know better. Users don't. If your model doesn't take that into account, your model is broken.
The Bitcoin model is broken. It very intentionally got rid of all the institutions that regulate and control finance, and in doing so, it got rid of everything that protects regular people from the wolves. The regular people aren't up to the task of protecting themselves, and they regularly show it. The model is broken.
So to be clear - i agree that bitcoin is a shitshow, haven for fraudsters and generally sucks.
But to the specific point, there is no model that fully takes this into account. There is no model that puts risk to zero. There will always be adversaries that can attack you if the payoff is large enough. There will always be people with increased risk exposure who have to take special precautions because the effort/reward calculus makes sense for malicious people to attack them.
The reason bitcoin sucks is not because its model includes such situations; it sucks because the bar for someone to be the type of person who has to care about such things in bitcoin is so much lower than in traditional banking.
He might be a bitcoin core Dev but does he use ledger/trezor etc?
Is his PGP key on his hardrive or a smartcard?
In this day and age your computer not a bastion it once was. (It never really was but it's more of a problem in 2022 than 1982).