With Tails you can have "persistent" drive that is encrypted with a very strong encryption. This way, you have store of Steem paper wallets and only extract the public key to pay into.
Still. Nothing beats a hardware for convenience and degree of protection.