In future Metamask will add biomerics acept for every transaction is safest, and browser extension for every transaction use 4number pincode. If any stolen 12 phrase his dont transfer money if dont known pincode or biometrics in mobile. Sory for my english. Tnx.