Would You double-Verify the address you’re interacting with on your HW just before signing the TX (not like the vast majority of CT)? Or do you only think about the initially and previous couple of (3–4) characters from the address? For an extra layer of security, you could permit a http://vanity-address.com