I'm now watching others struggle with hardware wallets/multisig/social recovery, as if choosing a "backup" plan: are you just backing up a copy and putting it in a drawer, or do you want multiple copies off-site, and also need to prevent yourself from forgetting the keys...

If the assets aren't large and you're mainly worried about accidental clicks or phishing, a hardware wallet is actually sufficient, at least raising the "signing" threshold a bit, so you don't just blindly approve every authorization popup. When the funds grow (or you frequently cross-chain or interact with a bunch of contracts), I lean more towards multisig: it's more troublesome, but it really helps reduce the risk of a single point of failure. Social recovery is suitable for those with poor memory who don't want to deal with seed phrases, but honestly, whether you trust those few people or that mechanism, you need to be aware, so it doesn't get awkward if you end up falling out with friends later.

Recently, someone was complaining again about validators eating MEV and unfair ordering... Anyway, I’m now even less willing to give permissions too freely. If I see even one abnormal record in the authorization logs, I can stay awake half the night. Play it safe first, whether to make money or not is another matter.