I've been diving for a long time, and recently hardware wallets are out of stock again, phishing links are everywhere. Many people in the group still say "I'll click first and then decide," but I really can't sit still anymore... Here's my rough categorization:

If your assets are not large and you're just worried about losing your phone or getting infected, a hardware wallet + writing down the seed phrase offline is enough, don't bother with a bunch of plugin authorizations;
Once you reach a certain amount (especially when frequently changing paths on-chain or rushing to sign to avoid slippage), single-signature hardware starts to feel stressful. Multi-signature is more reassuring—at least you won't lose everything if you get phished once, but it’s a bit more complicated to operate and transfers are a bit slower;
If you're more advanced or often on business trips / worried about "notebook paper getting lost" at home, social recovery is quite appealing. The prerequisite is that the guardians shouldn't be from the same circle or using the same device, or you'll all be at risk if something happens.
Anyway, don’t panic and sign during congestion—those few seconds in the mempool are when people are most prone to mistakes.