Why wouldn't you keep your money on an entirely separate device? Even a cheap one? Why take that risk at all. That and using cold storage or 2FA.

That's probably how 90% of people in cryptography store their shit. I almost guarantee you there is some asshole out there with $1 million in Metamask. Outside of bitcoin the cold storage narrative is much less prevalent