If we doesn't click on any site nor delete then still possibility of any malware attack?
My device will not download anything file unless I authorized for it. I visit just the correct URL if known sites. I have three devices and I am still careful on the least secure one. Where my wallets are, the are most secure but still online. J have not suffered any hack before.
Fir my bitcoin wallet, for long term storage, it is on a multisig devices.
Going for airgapped, hardware wallet or other cold storage wallets for higher amount of bitcoin is advised.