as long as you do not provide your wallet's private key, I think it is very difficult for hackers to steal your assets, and all this time the loss or theft of assets is due to the negligence of the owner who accessed a fake exchange
Hackers are very much active these days and even if you do not give your private key to anyone, your wallet is subject to a risk.