Most cold wallets are hardware wallets; a paper or metal backup of a seed phrase kept offline is also cold storage.
Because the keys stay offline, malware on your computer cannot steal them. You still have to check what you sign on the device screen.