I have become increasingly concerned with security considering all of the attempted hacks, scams etc..

Knowing this I have moved much of my funds out of exchanges, but now if I hold these funds in MetaMask, can someone initiate a payment without my consent?

I received a full-screen warning from MetaMask with a warning for Ethereum Phishing.

Picture below:

https://i.imgur.com/5rBFDmG.png

Keen to hear your thoughts