TL;DR: Check out for dubious file extensions or files that can be used to run or .scr exploits. Also, compartmentalize your OS and software with VMs. #tldr
https://support.apple.com/guide/mac-help/show-or-hide-filename-extensions-on-mac-mchlp2304/mac