Recently, I saw the criticism that the re-pledge and shared security approach is a "nested doll" scheme, and I instead thought: no matter how many times the returns are stacked, it can't prevent a single signature mistake from wiping everything out... I stopped screenshotting or cloud storing mnemonic phrases long ago, writing two copies separately, which is troublesome but gives peace of mind. The more red line is signature authorization; when I see "unlimited limit" or "blind signing," I usually close the page immediately, even if it means earning less. Now I am willing to take an extra step: before each interaction, look at the domain name a couple more times, and revoke authorization after use. It's really annoying, but it's much cheaper than being educated by a phishing site.