Connect to your Metamask wallet only when you know "for sure" the website is legit.

Make sure there is a Disconnect from your wallet button to log out.

Don't ever download suspicious files from your email box, because they may contain tracking/hacking viruses.

Last but not least, don't ever connect to your Metamask wallet 24 hours, 7 days a week.