Metamask is not secure at all, you can have a keylogger or a rat and all your tokens are gonna be gone because of that. Not your keys, not your crypto - Just buy a hardware wallet and all your problems are gonna be solved.
Be carefull with your money, if you want to be save please use metamask instead. Or even buy some hardware wallet like ledger to store your ethereum and all erc20 token in it. Also never click a spam email in your spam box t could be another phsing attempt or even rat.
LOL,metamask is very secured,you wont need to put your private keys when you have the metamask.Dont talk sometime that you might now know how it works.Secured wallets wont get breached if the owner are responsible,do not use any web or app wallet if you dont want to get hacked because these wallets are more prone to these hackers.