I'd say there's no one-size-fits-all answer to this question. Number one goal here would be get them to take the first steps without overwhelming them. None of us leveled up to where we are now in a single leap.

My default onboarding wallet right now is Phoenix. Works with on chain and lightning, regular 12 word backup.

Getting sats obviously varies on jurisdiction. Non KYC is ideal but can be daunting as a first experience. In Canada I point to Bull Bitcoin, internationally I point to Hodlhodl (but will concede to an easy KYC exchange if this is too much of a challenge out the gate.

Cold storage can depend again on the user.

Timid: tapsigner on Nunchuk mobile
Willing to learn: Coldcard/Sparrow plugged in (much easier than many would assume if you don't get distracted by the bells and whistles)
Eager: CC/Sparrow air gapped 

Many non technical people I've worked with over time have leveled up over time to:
-Phoenix hot wallet
-No KYC sats
-Coinjoin
-Coldcard air gapped
-Running a node

Not everyone needs to get here, but a lot get curious and excited once they fall down the rabbit hole.

Holy crap this is a long reply. Sorry.