Recently, I've seen people watching on-chain large transfers and unusual activity in exchange hot and cold wallets, interpreting it as "smart money"… I think there's no need to jump to conclusions first; if the wallet security isn't solid, no matter how fast you follow, it's useless.

Don't take photos of your seed phrase or upload it to cloud storage; if you really need to back it up, write two offline copies and store them in different places. Don't just click "confirm" on signing/authorization requests all the time, especially on sites that offer "free claims" or "airdrops"—no matter how well-designed the page looks, don't trust it. To put it simply: if you're asked to enter your seed phrase, that's a red line; if you're asked to give unlimited permissions, refuse it first. Better to earn less than to treat your wallet like a blind box. Anyway, now I see pop-up windows, I first check what I'm signing and who I'm authorizing to, and if I feel uncomfortable, I close it and come back later.
I'm going to work now.