It is highly recommended that bitcoin and other cryptocurrencies worth more than $1000 should not be stored on online wallets, all hardware wallets are non-custodian. I have never seen one custodian hardware wallet before, they are all non-custodian like I said.
If we start from the fact that some reliable models of hardware wallets can be bought for $50 (and even up to 30% cheaper sometimes), then it would certainly make sense to invest in such a device for even less than $1000 worth of crypto. Because that value can go up a lot over time, let's just remember what happened from 2015 to 2017 when BTC is jump from $200 to $20 000.
The wallet that are most prone to attacks are web wallet, they are all custodian wallets, all the non-custodian I know are mobile, desktop and hardware wallets in which private key are stored on the devices. It must be protected, especially mobile and desktop wallet private keys as it can be hacked through malware by scammers.
Web wallets are especially vulnerable to phishing, which is largely due to the fact that some users do not have a habit of using the internet safely and without any checks click on every link that appears to them on e-mail, Facebook, Telegram or Twitter. But those who do not know how to protect themselves from phishing will sooner or later become victims no matter what crypto wallet they use.