Call me whatever you like, but maybe it's just me who feels that using a google chrome extension wallet (metamask), is not that secured.. I feel that the tokens there can easily be hacked. I know it is handy and easy to use but security issue concerns me.
That is good behaviour in general. However if you use proper routine and be careful with your transactions, metamask is very safe. If you want to be even safer: start your journey with a ledger / trezo, connect that to the metamask and work from there. This way each transaction needs to be confirmed with a press of a button.
Also Metamask is a very respected tool to use in the new crypto world - it is not just a chrome extension.
I found that most coins fall into the different tier:
- t1 they are on binance / kraken / robinhood
- t2 they are on the lesser exchanges (huobi, gate.io)
- there is a third tier but I usually dont bother with them
- they are on the dexes
you can easily get on the exchanges by just buying it - iirc the lower t3/t2 have something like 10k payment to get listed. which if you want to be blackhat is a marketing expense.
but there is some trust in "if it gets listed in these exchanges it is a longer running project" - they do their due dilligence.
And over all binance has a lot of the tokens, but I hear it takes their approval plus at minimum 1M to get listed (rumor).
Which is why I recommended checking coingecko and figuring out, which of the other exchanges always appears and just get accounts there.
You can easily transfer funds between the exchanges, but be aware of the cost of transfer and keep your shopping tokens separated from your long term hodl tokens: depending on where you live, you likely fall under fifo principle when it comes to tax season.
I usually use usdt or xlm to transfer between exchanges; usdt has the benefit of most tokens being available in those pairs and I just bite the bullet on the withdrawal fees once. hth.