For a start.. reduce what keys you use. Mostly use Posting keys only... never use your owner keys ANYwhere... especially if the accounts have value in it.

Then review the apps before using them. Sometimes all you need is to find the source code is open. If it is, you can check!