@gritnot Metamask is a hot wallet and in that sense less secure than a hardware wallet. However, it is convenient and it's integrated In Brave's browser.

Also, only download and verify from the trusted website Metamask.io
Only put into it what you'd want to really miss. Attack surface is larger, think about if you'd download a malicious extension.

Articles on Internet such as this one is a review -
bitdegree.org/crypto/metamask-