This is why you won't catch me downloading anything from random links. Never. I always wait to get links from official handles of any project I want to download its app. I'm really weary of links.
Yep, you gotta be careful as all it takes is aocuple of minutes of not being concentrated on what you are doing to loose everything.
I know a guy who lost 100k few years ago by connecting his Metamask to a scammy website. He was in a hurry and wanted to buy some shitcoins, scammy add brought him to the fake website of altcoin project he wanted to invest in, and then second he connected his wallet, he lost everything. And this guy is working in crypto full time and in industry since the early days, meaning he was no newbie at all.