I’ve set a few strict rules for myself: I will never enter any input box with my mnemonic phrase in this life; whoever asks me to fill one out, I’ll consider it a phishing attempt.

When I encounter a signature request, I pause for three seconds to see if I’m authorizing a payment or just logging in—don’t get excited and treat your wallet like a bank card.
Recently, everyone has been comparing RWA and US Treasury yields to on-chain yield products. I’m tempted too, but no matter how high the “annualized” rate is, it can’t compare to the risk of accidentally signing and granting full permissions…
Anyway, I’d rather go slow and double-check a few times. The premise of earning “wool” as income is that the wallet is still safe.