Find an on-ramp in your country. In the US river.com is best. 

Get a hardware wallet to hold your keys offline.

Buy at regular intervals to “DCA” then move it from your on-ramp to your offline hardware wallet every month or so 

 With you recommending it I bet river.com is some KYC shithole 

Bisq is bisq 

 You are still here? And you cannot be zapped? Why are you here? 

If you cannot be zapped you don't understand #nostr 

 If you can be zapped you don't understand nostr