Your fear is very natural
I think about hacking etc.
usually it can't be avoided by us because there are most heckers who are used to doing things like that.
without having to log in without having to wait for our approval it can be done by heckers.
But what I know about metamask is that there is a guarantee of safety, especially since metamask has become a popular tool for payments etc., in crypto.
but also on the other hand we must also be careful and maintain security measures about metamask.
and not trust just anyone even if that person is our closest friend.