IMO the best attack is 2 or 3 prong attack. Well not just my opinion but IEEE and the whole engineering community. TVSS is divided into 3 classes of A. B, and C.
Class C is Service Entrance devices sometimes called Whole House protectors and the most effective are just 3-modes for single phase service connected between L-L, L1-N, and L2-N. The other 3 modes L1-G, L2-G, and N-G are NOT NEEDED and a waste of money and material. The required N-G bond at the meter negates their use. No SPD can handle as much energy as a bolted fault. Look for Models with UL 1449 Second Edition and a minimum of 70 Kva/mode. 200 Kva typical. The bigger the better. Ignore Joules ratings
Class B is for Sub Panels and no need to discuss for most residential applications as they do not normally have Sub panels beyond the Main panel.
Class A is Point of Use. Look for 5 modes, UL 1449 Second Addition, 15 Kva /mode minimum. Like any class bigger is better. Ignore joules. Kva is what you look for.
OK here is the meat on the bone. If you only do just one TVSS device, do it at the Service Entrance. 99% of all surges come via the utility differential mode. A Class A device at Point of Use just does not have enough capacity to take TVSS events from the utility. The Class C absorbs most of the energy, what does get through can then be handled down stream by the Class A device.
Last tid-bits is look for buit-in TVSS. The most effective Service Entrance TXSS are the Meter Collar type where you unplug the meter, plug in the TVSS, and then plug in the meter. Next in line for Class C is either built into the Main Panel bolted between the busses, or dual pole that are plugged into Dual ganged circuit breaker slot. Last is add-on to side of Main Panel keeping leads tightly twisted, straight and short as possible.
For Class POU built in the receptacle and invisible other than indicator lights.