Recently, everyone has been discussing whether the main public chain will migrate or hard fork after the upgrade, but I am more worried about another issue: the more of these nodes there are, the more phishing sites love to come out and jump on the bandwagon, fake "migration / airdrop claim / signature confirmation" pages popping up one after another.

As for mnemonic phrases, honestly, there's a red line: anytime any website/customer service/plugin asks for your mnemonic phrase, just close the page immediately, no hesitation.
Don't trust too much in signature authorization either—many times, it's just opening the door to unlimited access. If you can avoid signing, avoid it; if you really need to, first check the domain name, then review the authorization details, and remember to revoke old authorizations afterward.
Anyway, I treat complexity as an enemy: fewer plugins installed, fewer links clicked, fewer signatures made—then fewer things will go wrong.