I don't want to brag, but I'm in the lightning capital of the western hemisphere.
I'm going to agree that the best lightning defense is a combination of lighting rods (to prevent direct strikes) and a whole-house, well grounded SPD1 arrester.
Type 1: Stops surges outside the house from getting in.
Type 2: Stops surges on one circuit from getting to another.
Type 3: Stops surges on one outlet from getting to another.
In all cases: you want one with an indicator of the health of the shunt(?). MOVs wear out and suppressors need replacing.
I will admit that I had, and still have, the ultimate solution which is an auto start generator.
Those tend to create surges all their own.
Back in the 1990s, during a protracted power outage at our Palo Alto data center, someone forgot to fuel the generator. It went out and the center went to battery power but no one noticed... that is until the battery died.
Once the battery died, the UPS went into bypass (so it was no longer acting as a surge suppressor). When they refueled and then started the generator, the spike from the start up (now directly wired into the circuits that fed the ethernet switches and severs) took out half the facility.
I'm assuming that you've got surge protection between your generator and the rest of your house (and your generator may have conditioning directly on it).
For me: my continuity plan is centered around a quartet of powerwalls.