The fact that you visit the correct URLs does not guarantee that you cannot get to a phishing site. Scammers can change the DNS of the server, as it was very recently with Galxe.com , and even earlier with the Myetherwallet wallet. This way you will come to the phishing site on your own.
Like I mentioned earlier, for better security, it is better to go for offline wallets or multisig wallet.
For my bitcoin wallet, for long term storage, it is on a multisig devices.
Going for wallet on an airgapped device, hardware wallet or other cold storage wallets for higher amount of bitcoin is advised. No matter how safe an online device is, it is not safe as offline devices and there could be a mistake at anytime.
I was only referring to ways to avoid malware and hackers online and how not to depend on a single device for all online purposes. For wallet download, you can verify its PGP signature.
Obviously we don't understand each other) If you connect to a phishing site that you switched to due to the change of DNS servers by scammers, then you will connect your wallet, since the domain does not cause you distrust. Right? Accordingly, you will sign the transaction yourself, and multi-signature will not help you in this, since you believe that this transaction is signed on the correct domain. The same applies to the wallet.