Recently, I saw someone get taken by a phishing site again—it's really just a moment... My red line for wallet security is getting stricter: never screenshot or upload mnemonic phrases to cloud storage, even if it's just for "temporary storage"; I no longer blindly click confirm on signature authorizations—if I can understand it, I look; if I can't, I cancel first, even if I miss an opportunity. Frankly, I can rely on market structure to slowly wait for a rebound, but once I give authorization to the wrong place, there's basically no regret remedy.

Changing the subject, recently the group has been arguing about privacy coins/mixing and compliance boundaries to the point of splitting—I can actually understand both sides' anxiety, but for me personally, it's more practical: don't send yourself into a trap first, use a secondary account if possible, only perform clean operations on your main wallet, and if you want to "go all-in" on the weekend, don't gamble with your main wallet.
Anyway, I’d rather make things a bit more complicated than wake up to find my assets turned to air.