Recently, I've seen a bunch of discussions about "re-staking/sharing security/interest stacking" turning into a heated debate, with comment sections calculating how many layers of traps they can set.

I, on the other hand, have simply changed my avatar to gray... To put it plainly, even if the returns are tempting, if your wallet gets compromised, everything is wiped out.

Others think: just take a photo of the mnemonic phrase and upload it to the cloud drive, then click "cancel" on the authorization, and that's it.
In reality: the mnemonic phrase is the key to life; taking a photo is like planting a landmine for yourself; signing authorization isn't just "logging in," some signatures are like handing over the keys to your vault.

My red line now is very simple: don't enter mnemonic phrases on unfamiliar sites; don't sign if you don't understand the signature; review and revoke old authorizations every few days.
Anyway, I'd rather earn less than send a year-end bonus to a phishing scammer.