These days, there's been more arguing in the group about privacy coins and coin mixing, whether they count as "original sins." Honestly, what I care more about is not losing my wallet first... Don't screenshot or upload your seed phrase to the cloud. If you really want to back it up, just be honest and write two offline copies and keep them separate.

And about signature authorization, many phishing sites won't let you transfer funds; they just trick you into clicking "authorize unlimited"—you think it's harmless, but later your assets are gone.
Anyway, if I see a domain I don't recognize, a pop-up urging me urgently, or one that makes me sign multiple times in a row, I just close it immediately, even if I might miss out.
What I don't regret is: every time I see something new, I first slow down, check the contract and authorization records first. Even if I earn a little less, I can sleep peacefully.