Fake xcode tools injecting malicious code into dev's apps: https://9to5mac.com/2015/09/20/xcode-ghost-app-store-malware...

Fake zoom updates: https://www.malwarebytes.com/blog/scams/2026/02/fake-zoom-me...

NPM supply chain attack targeting cryptowallets: https://www.paloaltonetworks.com/blog/cloud-security/npm-sup...

More software means more complexity means more pathways to losing.

Can you do it? Sure. I'm sure there are millions of dollars in private keys stored on internet connected laptops somewhere out there. But the best practices remain the same: as little internet as possible, as little software as possible.