I have seen a lot of posts lately where people have lost funds their funds through their MetaMask wallet. While there is no evidence that this is MetaMask's fault (and I don't think it is), the default installation of MetaMask does give them way more access to your personal data than they should ever have.
NOTE: If you are using Firefox, it's currently not possible to apply this fix. I recommend you to use MetaMask only with Chrome or Brave browsers.
If you have MetaMask installed on your Chrome or Brave browser, by default it will have the option "This Can Read and Change Site Data" enabled "On All Sites". Here is what it looks like:
Why should you care? Well, this means that any data going through your browser can be read, altered and stored by MetaMask if they choose to do so. And by all data, I mean usernames, passwords, personal information, etc.
Now, I am not saying MetaMask has malicious intent. Not at all. However, they could store specific data about you and sell it to other companies if they wanted to. And if that data in MetaMask's database ever gets hacked, well ..you know what that means.
So, how can you fix this? It's very simple.
This way MetaMask will only have access to the data from websites where you're actually using MetaMask on.
Now, you must be careful! If you are on any website and you click on the MetaMask icon, you will give MetaMask access to that website, because you are "Clicking on the Extension". Clicking on it will give it access to that website.
So, to be absolutely safe, be sure to only click MetaMask either:
If you value your safety and privacy, take these steps right now!