Quick safety habit for the Risk room: before you click any link or connect any app to

your exchange account, check the address yourself, and keep withdrawal permissions switched off on any API key you create. Which security habit do you never skip?