the best way to protect yourself is always check the website that you are accessing and never ever "Sign in" on that you think is a phishing website. Some are using Trezor to access Metamask to fully secure their asset since it requires the hardware before it can be accessed or make transactions.
That is the point people should really be worried about. The problem isn't the browser you are using, but the sites you are giving permission to link to your metamask wallet. It's a must to check the legitimacy of the sites before confirming anything. Actually that is what metamask warns when we attempt to link it to any sites.
For hackers it's easy to pretend they are going to distribute a token or NFT for free just to connect themselves to someone's wallet and in the end they say it's a browser issue or vulnerability that caused the victim to lose his funds.