As long as Monero has not implemented FCMP do not just hop in. Keep a small stack for weekly/ monthly spendings.

Read about timing attacks.

Most attacks on Monero involve metadata. That's why it is good to see CEX delist Monero. It makes EAE attacks and timing attacks based on KYC metadata outside of the Monero protocol basically infeasible.