These days, I've been seeing a bunch of "testnet points farming" again, and the group is still guessing whether the mainnet will issue tokens.

Honestly, what I fear most is not missing out, but getting excited and handing over my wallet...
Never touch the seed phrase, no matter how official they sound, even if they say it's from the other side.
And about signature authorization, don't reflexively click confirm when the pop-up appears—pause first: what permissions are they really asking for, and is this from an unfamiliar site?
Better to go slower, fewer "Next" steps, I’d rather be a stone than risk it.
Anyway, missing airdrops makes me itch for a few days, but having my wallet emptied—that's what keeps me awake at night.