Recently, I've seen a bunch of people comparing on-chain yields with RWA and U.S. Treasury yields.

I'm not saying they can't be compared, but first, get your wallet security sorted out before talking about "returns"...
Never take photos of your seed phrase, don't upload it to cloud storage, and writing it down twice and storing separately is better than screenshots.
As for signature authorization, many phishing sites don't ask you to transfer funds; they just ask you to "confirm," which is basically giving unlimited authorization, and a few days later, they drain your account.
Anyway, now I always check the domain name before clicking any link, limit authorization amounts if possible, and regularly revoke old authorizations.
I'd rather miss out on airdrops than become a liquidity donation.
That's all for now.