Just a piece of advice, better get metamask application on your smartphone and lock with fingerprint than using as add-on on pc browsers, you are more exposed to attacks this way, and even more worse if you got other browser add-ons too, metamask is now fully standalone on android phones
The metamask extension is actually safe to use so long as you download the genuine extension. I have never heard of an incident of an attack on the extension. The most common scams are orchestrated through fake or phishing metamask extensions which anybody sensible can avoid if they download the right app