Fewer connections

Connect your wallet only to sites you actively use. Each connection is a potential prompt for a malicious signature later.

Disconnect and revoke

Disconnect sessions when done and revoke approvals you no longer need. Do not leave standing permissions with sites you visited once.

Separate wallets

Use a throwaway wallet for experiments and a protected wallet for holdings, so a bad connection never reaches your savings.