If I could only keep one habit: never enter mnemonic phrases into any webpage/form/chat box, no matter how much the other side looks like the official website. Recently, with blockchain games that have inflation + studio bots flooding in, the coin prices spiral downward, and project teams are too busy to care, let alone expect the "compensation links" you click to be trustworthy... Anyway, I'm pretty cautious now about signature authorizations; if I can avoid connecting, I do. When gas fees are high, I just consider myself offline and idling—what I save might be more than just the transaction fee.