What is a Hardware Wallet? (or How to Make Your Cold Storage Hot)

Hello steemians,

It's said that all Internet-enabled devices are technically hack-able. So how can you confidently store money on them? "Cold storage" was developed to take crypto "private keys" offline, but then how do you spend the crypto?