I'm now basically: small daily transactions all go through L2, saving gas, worry-free, and the experience is smooth; but for contracts that are truly long-term or have a lot of permissions, I still go back to the mainnet, yes it's more expensive, but at least I can sleep soundly. To put it simply, the compromise is not to expose yourself fully just to save a few bucks... especially since hardware wallets are out of stock lately, and phishing links are everywhere, the more you try to save, the easier it is to slip up and make mistakes.

Thinking about it later, it's quite funny—before, I complained about the mainnet being slow, but now the biggest cost isn't gas at all, it's whether I carefully verify the address/authorization.
Anyway, for myself: I keep funds layered, only put the necessary amount on L2, accept only authorized receipts, always manually type or save links in bookmarks, rather than clicking blindly—better to take a couple of extra steps.