Ok, I have heard about people getting their Metamask getting hacked.
It showed up on my BSCSCAN.com tracking. I have set up email alerts. Everyone should do that.
I supposed it should be ok if you don't add the tokens to your wallet via 'Add Custom Token' by adding their contract address. I did that but just removed the tokens by disabling so it is not showing up in the wallet anymore.