Just saw someone sharing a wallet screenshot—so the seed phrase was actually written directly in a Notes app, and even synced to iCloud… Plainly put, you can defend against sandwich attacks, but you can’t defend against your own accidental tap. Recently I’ve been seeing debates in the group about NFT royalties and liquidity—honestly, what’s that little friction cost in the secondary market? What’s really deadly is that if you just tap “Sign” in your wallet, it authorizes unlimited allowances—phishing sites catch you one after another. Anyway, my current red line: keep the private key always offline; before signing, check what gas is for that contract—if you don’t understand it, hit Ctrl+W.