If you see such website without security or not safe. Actually there are lot of new projects that require connecting metamask so to say to buy off something. Sometime you need to check whether those site connected to a very fishy contract. I once admit Ive fall to a scammer scheme. I've sent my tokens to their dapp approval and noticed in etherscan that there is no contract but the dapp design to put your contributions to a wallet. Of course that's somehow scared you since it's already a wallet and filling up scammers bags.