Frankly, OP's actions could be worse, but not by much. Well, there's always a deeper hole to dig.
A lot has been enumerated already as very questionable or rather very bad practices. I might have overread something here and there.
Here my bits and pieces. Don't use your daily driver as device for your crypto wallet (reading and answering emails: not good any near your crypto wallets (on the same device)). Daily shit surfing isn't any better. Web browsers, fake links in emails, questionable executable/active downloads are commonly the main intrusion vectors, lets not talk about zero-days and other vulnerabilities in SaaS OS crap.
I'm not entirely sure if OP actually keeps his wallet's mnemonic recovery words only in memory, despite a few hints to words he carries with him (another terrible practice). If he does, close to worst practice. It's almost guaranteed that something will be forgotten, especially when he doesn't use the words for some time.
A healthy human brain can memorize 12 or 24 or more words with the proper technique. But to keep it in memory 100% correctly you have to regularly repeat and replay. To check if you're still 100% right, you should have a correct written copy (better multiple redundant copies). The need for a surely correct written copy makes memorization pointless, unless you need to cross borders "naked", but that's only temporary.
Your whole setup is a security gamble and your coins or wallet not yet being stolen doesn't prove anything about your wallet's future. You already announced to accumulate more coins. If I were a bad guy and had a foot in the door to your device, I'd wait until you stacked up more coins. LOL!
Get a decent hardware wallet, stay away from the Ledger and other closed-source crap, learn and practice to use it safely, don't use crypto wallets on Windows OS, due to dominent market share the most targeted OS by malware.
Keep calm and hodl...
