Securing your account against hacking?

In the last year, I became concerned about my account security. I don't want to log in one day and find half a million dollars has vanished. My response was to get a cheap Chromebook and only open my investment accounts and H&RBlock tax service on that machine, and changed my passwords on it, while using my Macbook for my other 99.9% of activity. The idea being that if there is malware on random websites, that Mac machine will never see my investment logins and the Chromebook will never see any random websites. Already using 2FA on my phone, of course, but SIM hacking makes that seem inadequate. Are there better security measures I should add, like physical hardware devices or ???

CryptoAlerta — análise de criptomoedas e mercado em tempo real