Yes, you are right. I need to be extra careful when I do transfers. Thanks! Hopefully Steemit may find a way to make this better. Maybe by adding some PIN number or something, that is not used to login, but only for transfers, and make it not work unless you are already logged in to Steemit (PIN would not be blockchain based). Or something.