It’s really not that risky— the only real action you take is signing events to post from the site if you want to mint, nos2x works great in showing what those events are in my experience. Aside from mint, museum interaction is just a sign in to read your npub and the site just tallies zaps on posts etc. there’s actually no lightning integration or touch points with the wallet.