Is it really THAT easy to get robbed?

If you're not participating in "investment discords" or clicking links from strangers then what are the chances of you actually losing your assets? Aside from someone getting ahold of your CEX account login credentials and somehow bypassing the 2FA, how else can they "get you"?

I don't have a Discord account

I don't even "Accept" private messages on literally any platform(Steam, Reddit, etc, etc)

I don't do anything other than buy on the CEX.

I don't know anything about "signing transactions" or any of them. I simply buy my crypto and that's it. I don't know much about advanced stuff like staking, and all that.

So if you're not falling for the same phishing methods that literally date back to the beginning of the internet, then how else can they get you?