Also please suggest a way to remove these tokens from my metamask and alternative security checks.
Also, I request you to check your metamask and scan for this token in your wallet.
The only way not expose your keys is to not interact with the contract in any way, and the only way to remove the tokens from your metamask is to interact with the contract by sending the tokens out.
So the only way to be safe is to just leave the tokens there, you can turn its display on metamask off so that it won't show among the listed tokens on your metamask interface, but know that when ever you view your address on bscscan, polygonscan or etherscan, the tokens will always be there, but it doesn't stop you from carrying out your day to day transactions on your wallet.