A little off topic for most of us here on RBlind but still worth posting for our instances Admins/Mods if no one else.

My very basic account security advice for Lemmy Admins

Have separate accounts for the things you do on an instance:

1. Only use Admin accounts for things requiring no less than an Admin to do.
2. Only use Mod accounts for things requiring no less than a Mod to to.
3. Use standard user accounts for everything else.

Be sure to log off of an account and close all apps and browser tabs and windows open when you used that account before trying to log in with a different account.

While there are a lot more things that can and should be done, using separate accounts is a good minimal place to start. It should help mitigate against UI exploits targeting admins account for compromise like we have seen with a few other instances recently.

Things can and probably will still go wrong but diligently using accounts of least privilege can helping reduce the risk of Admins getting caught up in some of the more simple traps.