Metmask fuzz/fud or is there really a problem and also with smart contracts?

Hi Guys,

I like the simplicity of Metamask but I see a lot of horror stories on the net for the moment.
Biggest problem is the metamask chrome extension which saves your keys in an uncrypted text file on your system and also stories that metamask private keys are stored online in the cloud.

Other problems are fishy smart contracts where you give access to your portfolio and can execute transaction in your name. Fishy NFT sites...

On reddit you see a lot of posts where people lost thousands of dollars.

What is the catch with Metamask and do you still use it, can you argument metamask is safe?
Or is there a safer way to use Metamask.
These are bad things for the defi ecosystem I find.

Would love to have some insight from you guys...