<p>A cold wallet by a long shot. With hot wallets, you are connected to the internet. As every bitcoiner should know, your coins are only as secure as your key. If Coinbase (an example of a hot wallet) gets hacked, your keys go down with them. If you are using Metamask on the same device you pirate movies on, the chances are high that you get malware and loose your keys. A cold wallet never touches the internet, and should be as secure as you physically keep it. </p>