I just saw in the group again people arguing that miner/validator income is being taken by MEV, or that the ordering is unfair, etc. Basically, no matter how lively the chain gets, it all comes down to "whose private key is in whose hands."

I personally feel that with different asset sizes, the choices are really different: if you don't have much money and just want to avoid phishing, a hardware wallet is enough—plug it in and confirm with a click, at least you won't accidentally authorize something crazy.
Once you reach a certain scale, daily transfers become more about fearing mistakes or losing the device; multi-signature is like giving yourself a "calm down for three seconds" brake, but it’s really troublesome.
I’m quite interested in social recovery—suitable for those who are afraid of losing their keys but don’t want to memorize seed phrases every day. However, if you trust the wrong person, it can be pretty awkward…
Anyway, don’t treat security as a one-time setup; you need to review it again after a while.