I used to think that phrases like "Don't take photos of your mnemonic" were a bit verbose, but now seeing phishing links everywhere, I realize it's a red line: write your mnemonic offline, don't upload it to cloud drives or send it to anyone, even if they claim to be customer service. The same goes for signature authorization; I used to just click confirm when a popup appeared, but now I take a closer look at what I'm authorizing, whether it's unlimited authorization, and I close unfamiliar sites immediately—after all, missing one time won't cost you a piece of meat. Recently, hardware wallets have been out of stock, making everyone more anxious to search for "alternative solutions," which is the easiest way to get caught... My current approach is pretty simple: keep frequently used addresses separate, be more cautious with large amounts, regularly clear authorizations, and prefer to be a bit more troublesome.