It’s a risk. Best practice is to use extensions to log in to different clients. The ones I’ve heard about are https://getalby.com/ and nos2x which was created by #[2]