Recently, I've seen people have their assets stolen by phishing sites again, and I really don't want to hear "I just signed my name" anymore.

Mnemonic phrases are essentially house keys—don't give them to anyone;
signing authorizations shouldn't be treated as "logging in," as some authorizations are unlimited from the start, and no matter how much you cry later, you can't get it back.

And those on-chain data tool tags have recently been criticized for being outdated or even misleading...
I now basically don't believe in "if it says it's secure, then it's secure,"
I'd rather spend half a minute more checking the domain name and what the pop-up is asking for,
any unfamiliar link is treated as a catnip trap.
Anyway, for someone like me who spends the least money to get the most outrageous avatars, staying alive is the most important.