With how advanced these scammers are getting, it's getting scarier every day to even share the same device you use for your wallet transactions on gadgets you use to visit the internet every day because some of these extensions being clones of a popular one can easily be mistaken and installed without knowing the danger that lies ahead. Even if the user is making use of a cold wallet, it's still not entirely safe to connect it to an infected device.
I always say this, you may believe you have everything secure but you may be stunned with a very sophisticated scam attack that may even break every protection barrier you can think of.
What I do is that I have a device that I only use for my Crypto-currency wallet and it is offline. Nothing they say is hundred percent safe not even the white house but if you want to have longevity in crypto-currency then you must do everything to protect yourself.