Using a proxy safely
A common setup keeps your main coldkey on a hardware wallet or offline device, and gives a staking proxy on your phone or computer the day-to-day staking.
If that device is compromised, the attacker cannot send your funds to another account. They could still move or unstake your stake, and bad trades can lose value. Remove a proxy as soon as you think its device is at risk.
A proxy can also be set up with a delay. Its actions are announced first and only take effect after the waiting period, which gives you time to cancel anything you did not expect.
Choose the narrowest kind of proxy that does the job.