Keystone's hardware wallet authenticity key has leaked. Where would you keep your crypto now?

Keystone said on Monday that the attacker who infected its website also stole the key used to verify genuine devices, so counterfeit wallets could look authentic.

In a hardware wallet, bought only directly from the maker
On an exchange account, since there is no fake device there
In a software (mobile/browser) wallet
On paper or offline, with my own key management
I don't hold crypto, so it doesn't affect me