And a good practice in general if you are too paranoid, and particularly on the addresses one have exposed to the public:

1. Use subaddresses, the ones starting with 8

2. Transfer first to another subaddress you control