It looks like this is about protecting your "web3" web application, not your individual self. In that context it's probably fine advice.