[GnuPG guide] do not store secret keys in disk

[heitorPB]

In the section Keep your primary key entirely offline, the guide writes to disk the secret keys. This is not so good, as it can be retrieved. In this guide, the author creates a temporary directory in ram just for this step. It is a good idea to add this to the guide.

[ckotte]

You should boot into Tails and create the keys there and store it in a VeraCrypt volume

[wh1t3fang]

I think Nitrokeys are a good solution to this problem as well. https://www.nitrokey.com/ This would allow users to take their keys with them when they leave their primary computer. Instead of sitting around in a default GPG directory on the computer, the users private keys would be stored on the Nitrokey for use by GPG.
These devices can also be used as hardware 2 factor authentication tokens which are more secure than commonly used SMS based 2nd factors.