Well it's true that even if you have your funds stored in a hardware wallet, you can still be targeted by phishing scams and malwares that steal information from systems. So it is always important to stay vigilant and avoid clicking unnecessary links or opening spam emails sent from unknown users. I know that the scammers are also becoming smart day by day, but we need to take precautions from our side.
I've seen a lot of people becoming victims of phishing scams and they were not even newbies but those who have been in the industry for quite a long time, it's only because the scammers use different methods and sometimes you just fall in their trap.
When it comes to our money there is not such a thing as too much caution, we need to always be on our guard as scammers are always devising new strategist they can use to try to deceive us and get to our coins, so once in a while we need to make an investigation about the new kind of scams which are now being used by them so in the case we find ourselves being subjected to them we are able to avoid it and we do not lose our coins in this way.