Is Ronin Wallet safe?

// On Chrome: isFirefox() → false → trackingConsentRequired = false
// On Chrome: _enableTrack = !false = true  (always on, no consent check)
// On Firefox: _enableTrack = Q.enableTracking (respects stored preference)
const trackingConsentRequired = isFirefox();

class TrackingManager {
  constructor(store, config) {
    this._enableTrack = !trackingConsentRequired; // true on Chrome
    ...
  }

  async initial() {
    const config = await configStorage.get();
    // Chrome path: ignores stored consent, hardcodes true
    this._enableTrack = (trackingConsentRequired ? config.enableTracking : true) ?? false;
  }
}

// After wallet confirms a transaction:
K.sendBackgroundEvent(
  x.Noop,           // screen type = no-op
  q.SendTx,         // event = 'send_tx'
  B.Successfully,   // status
  {
    action_properties: {
      tx_hash: P.result,       // the confirmed transaction hash
      source: s.hostname       // originating dApp hostname
    }
  }
);
// getCommonProperties() merges ronin_address and wallet_type into every event

// 8 browser signals collected for fingerprint:
function trackingFingerprint() {
  const client = new ClientJS();
  return client.getCustomFingerprint(
    client.getUserAgent(),          // browser UA string
    String(client.isLocalStorage()), // localStorage available?
    String(client.isSessionStorage()),
    client.getTimeZone(),           // e.g. "Europe/London"
    client.getLanguage(),           // e.g. "en-GB"
    client.getSystemLanguage(),
    String(client.isCookie()),
    client.getCanvasPrint()         // canvas rendering hash
  ).toString();
}

// Result stored in two places:
async function persistFingerprint(fingerprint) {
  localStorage.setItem('ma_user_fingerprint', fingerprint);
  await trackingStorage.setFingerprint(fingerprint); // chrome.storage.local
}

// Used as both userId and deviceId in analytics:
analytics.initialize({
  userId: fingerprint,
  deviceId: fingerprint,
  commonProperties: { ronin_address: walletAddress, ... }
});