Great list, but I would add:

11 - If you don't use an air-gapped computer for your wallets then be damned sure your main computer you do wallet operations on does not have malware or spyware on it doing keystroke logging
12 - Encrypt your wallet passwords and remember the password, don't write it down
13 - Backup you encrypted wallet private keys religiously (even if you're not religious)
14 - Avoid online "lite" wallets - download the HTML and run it locally by opening the index.html file
15 - DON'T LOSE YOUR WALLET PASSWORD